last executing test programs: 1.111454594s ago: executing program 2 (id=2950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000000009030000000000000000000a0000070c0004800700014000000004080005400000000c0900010073797a3000000000240002001400018008000100e000000108000200ffffffff0c000280"], 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) 1.026856993s ago: executing program 2 (id=2953): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.016349432s ago: executing program 2 (id=2954): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x8}, {0x2, 0x0, 0x7}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x65, &(0x7f0000000000)=r3, 0x11) 927.226187ms ago: executing program 2 (id=2956): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup, 0xffffffffffffffff, 0x1a, 0x1c}, 0x20) 926.425891ms ago: executing program 2 (id=2958): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00000000000000120000f1850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="2f03", 0x2}], 0x1, 0x0, 0x0, 0x800}, 0x20004011) recvmsg$unix(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2}, 0x94) 697.807717ms ago: executing program 0 (id=2965): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x200403}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) 694.897936ms ago: executing program 0 (id=2967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, 0x1, 0x1, 0x201, 0x0, 0x0, {0xa}, [@CTA_FILTER={0x4}, @CTA_TUPLE_REPLY={0x4}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="600000000206050000000000000000feff00000014000300686173683a69702c706f72742c6970000900020073797a32000a00000500040000000000050005000a0000000500010006000000140007800800064020000000080008"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 647.362561ms ago: executing program 0 (id=2969): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10021}}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffffffffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="180000003c000bab95000000020600f90324fc000000cda0", 0x69}], 0x1}, 0x40) 566.978635ms ago: executing program 3 (id=2971): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000020000000000000001000084000000000000fdff"], 0x0, 0x3e, 0x0, 0x1}, 0x28) 565.765968ms ago: executing program 0 (id=2972): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000000008d"}) 565.497426ms ago: executing program 3 (id=2973): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002500)={@map, 0xffffffffffffffff, 0x31, 0x2008}, 0x20) 484.736961ms ago: executing program 3 (id=2975): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4093, 0xffd}, {&(0x7f0000000840)=""/4074, 0xfea}, {&(0x7f0000003540)=""/4130, 0x1022}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000340)=""/174, 0xae}], 0x5}, 0x102) 483.544758ms ago: executing program 0 (id=2976): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 474.863131ms ago: executing program 3 (id=2978): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="020300001b0000000000000000000000040003000000000000000000000000000000000000000000000000000000000002000600000000000a"], 0xd8}}, 0x0) 429.340573ms ago: executing program 0 (id=2979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000180)=0x1) 420.82854ms ago: executing program 3 (id=2980): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)={0x28, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x14, 0x3, 0x0, 0x1, [@nested={0x10, 0x118, 0x0, 0x1, [@nested={0x4, 0x7b}, @typed={0x8, 0xde, 0x0, 0x0, @uid}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 407.818762ms ago: executing program 1 (id=2981): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d493", 0x48}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4811) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x24008010) setsockopt$sock_attach_bpf(r0, 0x6, 0x1f, &(0x7f0000000200), 0x11) 349.912389ms ago: executing program 3 (id=2982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x4000000) 261.784338ms ago: executing program 1 (id=2983): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000029c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x0, 0x40, 0x0, 0x0, 0xa, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0xff}, 0xa, @in=@broadcast, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 260.768352ms ago: executing program 1 (id=2984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x4}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 172.543249ms ago: executing program 1 (id=2985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x2c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) 171.66854ms ago: executing program 1 (id=2986): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x40000}, [@call={0x85, 0x0, 0x0, 0x7a}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r0, 0x4) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) 47.642991ms ago: executing program 1 (id=2987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@gettaction={0x14, 0x32, 0x6dd711a25f4cb68b, 0x70bd07}, 0x14}}, 0x2004c080) 0s ago: executing program 2 (id=2988): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x7c, &(0x7f00000000c0)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a0003150248035c3b61c1d67f6f94207134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b55f4d2a6823a45f28fcb1d", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): yzkaller #0 PREEMPT(full) [ 456.700995][T13472] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 456.701007][T13472] Call Trace: [ 456.701014][T13472] [ 456.701022][T13472] dump_stack_lvl+0x16c/0x1f0 [ 456.701056][T13472] should_fail_ex+0x512/0x640 [ 456.701084][T13472] ? kmem_cache_alloc_bulk_noprof+0x6d/0xbc0 [ 456.701108][T13472] should_failslab+0xc2/0x120 [ 456.701130][T13472] kmem_cache_alloc_bulk_noprof+0x85/0xbc0 [ 456.701158][T13472] ? trace_kmem_cache_alloc+0x28/0xc0 [ 456.701180][T13472] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 456.701195][T13472] ? register_lock_class+0x41/0x4c0 [ 456.701212][T13472] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 456.701232][T13472] ? mas_dup_build.constprop.0+0xc52/0x1740 [ 456.701249][T13472] mas_dup_build.constprop.0+0xc52/0x1740 [ 456.701271][T13472] ? __lock_acquire+0x62e/0x1ce0 [ 456.701287][T13472] __mt_dup+0xeb/0x1f0 [ 456.701303][T13472] ? __pfx___mt_dup+0x10/0x10 [ 456.701334][T13472] dup_mmap+0x373/0x21d0 [ 456.701357][T13472] ? __pfx_dup_mmap+0x10/0x10 [ 456.701385][T13472] copy_process+0x4081/0x7690 [ 456.701407][T13472] ? __pfx_copy_process+0x10/0x10 [ 456.701426][T13472] ? _copy_from_user+0x59/0xd0 [ 456.701440][T13472] kernel_clone+0xfc/0x930 [ 456.701454][T13472] ? get_pid_task+0xfc/0x250 [ 456.701471][T13472] ? __pfx_kernel_clone+0x10/0x10 [ 456.701495][T13472] __do_sys_clone3+0x212/0x290 [ 456.701510][T13472] ? __pfx___do_sys_clone3+0x10/0x10 [ 456.701539][T13472] ? __fget_files+0x20e/0x3c0 [ 456.701551][T13472] ? handle_mm_fault+0x240/0xd10 [ 456.701570][T13472] ? rcu_is_watching+0x12/0xc0 [ 456.701585][T13472] __do_fast_syscall_32+0x7c/0x300 [ 456.701597][T13472] do_fast_syscall_32+0x32/0x80 [ 456.701608][T13472] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 456.701623][T13472] RIP: 0023:0xf707e579 [ 456.701633][T13472] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 456.701644][T13472] RSP: 002b:00000000f546e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 456.701656][T13472] RAX: ffffffffffffffda RBX: 00000000f546e460 RCX: 0000000000000058 [ 456.701663][T13472] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 456.701669][T13472] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 456.701676][T13472] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 456.701682][T13472] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 456.701696][T13472] [ 456.869020][T13480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2180'. [ 457.796895][T13493] loop2: detected capacity change from 0 to 7 [ 457.797839][T13493] loop2: [POWERTEC] p1 p2 [ 457.798412][T13493] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 457.799864][T13493] loop2: p2 start 2490368 is beyond EOD, truncated [ 457.828383][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 458.163417][T13489] netlink: 'syz.0.2182': attribute type 1 has an invalid length. [ 458.163435][T13489] netlink: 'syz.0.2182': attribute type 4 has an invalid length. [ 458.340610][T13496] gtp0: entered promiscuous mode [ 458.345688][T13496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2184'. [ 458.492960][T13506] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2187'. [ 459.378217][T13513] rdma_rxe: rxe_newlink: failed to add syz_tun [ 459.672500][T13526] syz_tun: entered allmulticast mode [ 459.791422][T13530] FAULT_INJECTION: forcing a failure. [ 459.791422][T13530] name failslab, interval 1, probability 0, space 0, times 0 [ 459.806693][T13530] CPU: 3 UID: 0 PID: 13530 Comm: syz.1.2195 Not tainted syzkaller #0 PREEMPT(full) [ 459.806719][T13530] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 459.806729][T13530] Call Trace: [ 459.806735][T13530] [ 459.806742][T13530] dump_stack_lvl+0x16c/0x1f0 [ 459.806774][T13530] should_fail_ex+0x512/0x640 [ 459.806799][T13530] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 459.806822][T13530] should_failslab+0xc2/0x120 [ 459.806845][T13530] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 459.806863][T13530] ? find_held_lock+0x2b/0x80 [ 459.806880][T13530] ? vm_area_dup+0x27/0x8d0 [ 459.806901][T13530] vm_area_dup+0x27/0x8d0 [ 459.806920][T13530] dup_mmap+0x877/0x21d0 [ 459.806954][T13530] ? __pfx_dup_mmap+0x10/0x10 [ 459.806997][T13530] copy_process+0x4081/0x7690 [ 459.807030][T13530] ? __pfx_copy_process+0x10/0x10 [ 459.807058][T13530] ? _copy_from_user+0x59/0xd0 [ 459.807079][T13530] kernel_clone+0xfc/0x930 [ 459.807099][T13530] ? get_pid_task+0xfc/0x250 [ 459.807123][T13530] ? __pfx_kernel_clone+0x10/0x10 [ 459.807161][T13530] __do_sys_clone3+0x212/0x290 [ 459.807182][T13530] ? __pfx___do_sys_clone3+0x10/0x10 [ 459.807217][T13530] ? __fget_files+0x20e/0x3c0 [ 459.807234][T13530] ? handle_mm_fault+0x240/0xd10 [ 459.807264][T13530] ? rcu_is_watching+0x12/0xc0 [ 459.807285][T13530] __do_fast_syscall_32+0x7c/0x300 [ 459.807303][T13530] do_fast_syscall_32+0x32/0x80 [ 459.807318][T13530] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 459.807338][T13530] RIP: 0023:0xf709e579 [ 459.807352][T13530] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 459.807367][T13530] RSP: 002b:00000000f548e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 459.807384][T13530] RAX: ffffffffffffffda RBX: 00000000f548e460 RCX: 0000000000000058 [ 459.807395][T13530] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 459.807405][T13530] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 459.807414][T13530] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 459.807423][T13530] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 459.807448][T13530] [ 460.857911][T13550] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2198'. [ 460.868754][ T63] block nbd0: Receive control failed (result -107) [ 461.039507][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 461.041168][T13555] loop2: detected capacity change from 0 to 7 [ 461.050682][T13553] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2199'. [ 461.052877][T13555] loop2: [POWERTEC] p1 p2 [ 461.059517][T13555] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 461.070128][T13555] loop2: p2 start 2490368 is beyond EOD, truncated [ 461.128839][T13547] lo speed is unknown, defaulting to 1000 [ 461.144272][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 461.235486][T13564] netlink: 'syz.1.2204': attribute type 7 has an invalid length. [ 461.243349][T13564] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 461.414061][T13578] loop9: detected capacity change from 0 to 7 [ 461.426063][T13578] buffer_io_error: 28 callbacks suppressed [ 461.426081][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.435859][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.441775][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.447120][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.451521][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.457317][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.462942][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.467010][T13578] ldm_validate_partition_table(): Disk read failed. [ 461.471680][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.549709][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.552612][T13578] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.555660][T13578] Dev loop9: unable to read RDB block 0 [ 461.558615][T13578] loop9: unable to read partition table [ 461.561372][T13578] loop9: partition table beyond EOD, truncated [ 461.564285][T13578] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 461.564285][T13578] ) failed (rc=-5) [ 461.591026][T13583] gtp0: entered promiscuous mode [ 461.603886][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 461.810677][T13589] wg1: entered promiscuous mode [ 461.812832][T13589] wg1: entered allmulticast mode [ 462.384673][T13606] FAULT_INJECTION: forcing a failure. [ 462.384673][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 462.393227][T13606] CPU: 3 UID: 0 PID: 13606 Comm: syz.2.2217 Not tainted syzkaller #0 PREEMPT(full) [ 462.393255][T13606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 462.393267][T13606] Call Trace: [ 462.393274][T13606] [ 462.393283][T13606] dump_stack_lvl+0x16c/0x1f0 [ 462.393316][T13606] should_fail_ex+0x512/0x640 [ 462.393342][T13606] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 462.393365][T13606] should_failslab+0xc2/0x120 [ 462.393387][T13606] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 462.393407][T13606] ? find_held_lock+0x2b/0x80 [ 462.393425][T13606] ? vm_area_dup+0x27/0x8d0 [ 462.393448][T13606] vm_area_dup+0x27/0x8d0 [ 462.393468][T13606] dup_mmap+0x877/0x21d0 [ 462.393505][T13606] ? __pfx_dup_mmap+0x10/0x10 [ 462.393547][T13606] copy_process+0x4081/0x7690 [ 462.393583][T13606] ? __pfx_copy_process+0x10/0x10 [ 462.393613][T13606] ? _copy_from_user+0x59/0xd0 [ 462.393635][T13606] kernel_clone+0xfc/0x930 [ 462.393656][T13606] ? get_pid_task+0xfc/0x250 [ 462.393681][T13606] ? __pfx_kernel_clone+0x10/0x10 [ 462.393727][T13606] __do_sys_clone3+0x212/0x290 [ 462.393749][T13606] ? __pfx___do_sys_clone3+0x10/0x10 [ 462.393785][T13606] ? __fget_files+0x20e/0x3c0 [ 462.393803][T13606] ? handle_mm_fault+0x240/0xd10 [ 462.393836][T13606] ? rcu_is_watching+0x12/0xc0 [ 462.393858][T13606] __do_fast_syscall_32+0x7c/0x300 [ 462.393878][T13606] do_fast_syscall_32+0x32/0x80 [ 462.393894][T13606] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 462.393916][T13606] RIP: 0023:0xf7f51579 [ 462.393931][T13606] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 462.393947][T13606] RSP: 002b:00000000f544642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 462.393963][T13606] RAX: ffffffffffffffda RBX: 00000000f5446460 RCX: 0000000000000058 [ 462.393974][T13606] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 462.393984][T13606] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 462.393994][T13606] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 462.394004][T13606] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 462.394029][T13606] [ 462.627900][T13611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2219'. [ 463.104153][T13618] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 463.406328][T13621] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 463.410051][T13621] UDF-fs: Scanning with blocksize 2048 failed [ 463.419153][T13621] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 463.422860][T13621] UDF-fs: Scanning with blocksize 4096 failed [ 463.766451][T13634] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 463.769913][T13634] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 463.785282][T13634] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 463.788271][T13634] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 463.799934][T13634] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 463.802909][T13634] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 463.970098][T13655] gtp0: entered promiscuous mode [ 463.984070][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2229'. [ 464.224971][T13666] loop9: detected capacity change from 0 to 7 [ 464.235291][T13666] ldm_validate_partition_table(): Disk read failed. [ 464.240781][T13666] Dev loop9: unable to read RDB block 0 [ 464.244521][T13666] loop9: unable to read partition table [ 464.248093][T13666] loop9: partition table beyond EOD, truncated [ 464.251178][T13666] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 464.251178][T13666] ) failed (rc=-5) [ 464.467930][T13672] FAULT_INJECTION: forcing a failure. [ 464.467930][T13672] name failslab, interval 1, probability 0, space 0, times 0 [ 464.474971][T13672] CPU: 3 UID: 0 PID: 13672 Comm: syz.0.2234 Not tainted syzkaller #0 PREEMPT(full) [ 464.475010][T13672] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 464.475027][T13672] Call Trace: [ 464.475037][T13672] [ 464.475049][T13672] dump_stack_lvl+0x16c/0x1f0 [ 464.475098][T13672] should_fail_ex+0x512/0x640 [ 464.475137][T13672] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 464.475176][T13672] should_failslab+0xc2/0x120 [ 464.475210][T13672] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 464.475242][T13672] ? __alloc_skb+0x2b2/0x380 [ 464.475285][T13672] __alloc_skb+0x2b2/0x380 [ 464.475322][T13672] ? __pfx___alloc_skb+0x10/0x10 [ 464.475353][T13672] ? __pfx_tc_ctl_action+0x10/0x10 [ 464.475423][T13672] netlink_ack+0x15d/0xb80 [ 464.475552][T13672] netlink_rcv_skb+0x332/0x420 [ 464.475596][T13672] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 464.475622][T13672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 464.475685][T13672] ? netlink_deliver_tap+0x1ae/0xd30 [ 464.475731][T13672] netlink_unicast+0x5aa/0x870 [ 464.475776][T13672] ? __pfx_netlink_unicast+0x10/0x10 [ 464.475814][T13672] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 464.475865][T13672] netlink_sendmsg+0x8d1/0xdd0 [ 464.475912][T13672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.475957][T13672] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 464.476052][T13672] ____sys_sendmsg+0xa95/0xc70 [ 464.476086][T13672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.476114][T13672] ? get_compat_msghdr+0x11a/0x170 [ 464.476168][T13672] ___sys_sendmsg+0x134/0x1d0 [ 464.476209][T13672] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.476267][T13672] ? find_held_lock+0x2b/0x80 [ 464.476319][T13672] __sys_sendmsg+0x16d/0x220 [ 464.476360][T13672] ? __pfx___sys_sendmsg+0x10/0x10 [ 464.476417][T13672] ? rcu_is_watching+0x12/0xc0 [ 464.476461][T13672] __do_fast_syscall_32+0x7c/0x300 [ 464.476495][T13672] do_fast_syscall_32+0x32/0x80 [ 464.476520][T13672] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 464.476578][T13672] RIP: 0023:0xf7f83579 [ 464.476602][T13672] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 464.476626][T13672] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000172 [ 464.476652][T13672] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000300 [ 464.476669][T13672] RDX: 0000000000008000 RSI: 0000000000000000 RDI: 0000000000000000 [ 464.476685][T13672] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 464.476700][T13672] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 464.476716][T13672] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 464.476751][T13672] [ 464.615704][ T40] kauditd_printk_skb: 807 callbacks suppressed [ 464.615725][ T40] audit: type=1326 audit(1759082325.504:14536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.632382][ T40] audit: type=1326 audit(1759082325.504:14537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.647965][ T40] audit: type=1326 audit(1759082325.524:14538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=351 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.659628][ T40] audit: type=1326 audit(1759082325.524:14539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.672103][ T40] audit: type=1326 audit(1759082325.524:14540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.684184][ T40] audit: type=1326 audit(1759082325.524:14541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.700019][ T40] audit: type=1326 audit(1759082325.524:14542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.704059][T13677] loop2: detected capacity change from 0 to 7 [ 464.709789][ T40] audit: type=1326 audit(1759082325.524:14543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.709842][ T40] audit: type=1326 audit(1759082325.524:14544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.709889][ T40] audit: type=1326 audit(1759082325.524:14545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13658 comm="syz.1.2230" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 464.747599][T11790] Dev loop2: unable to read RDB block 7 [ 464.750823][T11790] loop2: unable to read partition table [ 464.754863][T11790] loop2: partition table beyond EOD, truncated [ 465.017339][T13677] Dev loop2: unable to read RDB block 7 [ 465.020080][T13677] loop2: unable to read partition table [ 465.023119][T13677] loop2: partition table beyond EOD, truncated [ 465.026519][T13677] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 465.313076][T13692] FAULT_INJECTION: forcing a failure. [ 465.313076][T13692] name failslab, interval 1, probability 0, space 0, times 0 [ 465.319633][T13692] CPU: 3 UID: 0 PID: 13692 Comm: syz.3.2239 Not tainted syzkaller #0 PREEMPT(full) [ 465.319666][T13692] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 465.319677][T13692] Call Trace: [ 465.319683][T13692] [ 465.319690][T13692] dump_stack_lvl+0x16c/0x1f0 [ 465.319721][T13692] should_fail_ex+0x512/0x640 [ 465.319745][T13692] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 465.319767][T13692] should_failslab+0xc2/0x120 [ 465.319789][T13692] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 465.319806][T13692] ? find_held_lock+0x2b/0x80 [ 465.319824][T13692] ? vm_area_dup+0x27/0x8d0 [ 465.319844][T13692] vm_area_dup+0x27/0x8d0 [ 465.319863][T13692] dup_mmap+0x877/0x21d0 [ 465.319900][T13692] ? __pfx_dup_mmap+0x10/0x10 [ 465.319946][T13692] copy_process+0x4081/0x7690 [ 465.320015][T13692] ? __pfx_copy_process+0x10/0x10 [ 465.320050][T13692] ? _copy_from_user+0x59/0xd0 [ 465.320073][T13692] kernel_clone+0xfc/0x930 [ 465.320093][T13692] ? get_pid_task+0xfc/0x250 [ 465.320122][T13692] ? __pfx_kernel_clone+0x10/0x10 [ 465.320168][T13692] __do_sys_clone3+0x212/0x290 [ 465.320195][T13692] ? __pfx___do_sys_clone3+0x10/0x10 [ 465.320242][T13692] ? __fget_files+0x20e/0x3c0 [ 465.320263][T13692] ? handle_mm_fault+0x240/0xd10 [ 465.320302][T13692] ? rcu_is_watching+0x12/0xc0 [ 465.320326][T13692] __do_fast_syscall_32+0x7c/0x300 [ 465.320349][T13692] do_fast_syscall_32+0x32/0x80 [ 465.320367][T13692] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 465.320389][T13692] RIP: 0023:0xf707e579 [ 465.320403][T13692] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 465.320420][T13692] RSP: 002b:00000000f546e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 465.320437][T13692] RAX: ffffffffffffffda RBX: 00000000f546e460 RCX: 0000000000000058 [ 465.320450][T13692] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 465.320461][T13692] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 465.320472][T13692] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 465.320483][T13692] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 465.320509][T13692] [ 465.383013][T13694] netlink: 'syz.1.2237': attribute type 1 has an invalid length. [ 465.432387][T13694] netlink: 'syz.1.2237': attribute type 4 has an invalid length. [ 465.753917][T13713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2244'. [ 465.804603][T13717] loop2: detected capacity change from 0 to 7 [ 465.812328][T13717] loop2: [POWERTEC] p1 p2 [ 465.814700][T13717] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 465.820433][T13717] loop2: p2 start 2490368 is beyond EOD, truncated [ 465.875076][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 466.075150][T13732] gtp0: entered promiscuous mode [ 466.082567][T13732] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2253'. [ 466.085120][T13737] tipc: Enabling of bearer rejected, already enabled [ 466.120528][T13737] mac80211_hwsim hwsim20 syzkaller0: entered promiscuous mode [ 466.123737][T13737] mac80211_hwsim hwsim20 syzkaller0: entered allmulticast mode [ 466.493696][T13748] loop9: detected capacity change from 0 to 7 [ 466.499055][T13748] buffer_io_error: 28 callbacks suppressed [ 466.499138][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.506022][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.510884][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.517160][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.521878][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.526721][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.532250][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.536507][T13748] ldm_validate_partition_table(): Disk read failed. [ 466.604415][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.610088][T13755] IPVS: Unknown mcast interface: pimreg1 [ 466.612819][T13743] lo speed is unknown, defaulting to 1000 [ 466.626172][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.647875][T13748] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.657410][T13748] Dev loop9: unable to read RDB block 0 [ 466.670192][T13748] loop9: unable to read partition table [ 466.682432][T13748] loop9: partition table beyond EOD, truncated [ 466.692357][T13759] loop2: detected capacity change from 0 to 7 [ 466.694995][T13748] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 466.694995][T13748] ) failed (rc=-5) [ 466.721036][T11790] Dev loop2: unable to read RDB block 7 [ 466.729233][T11790] loop2: unable to read partition table [ 466.735661][T11790] loop2: partition table beyond EOD, truncated [ 466.743990][T13759] Dev loop2: unable to read RDB block 7 [ 466.747928][T13759] loop2: unable to read partition table [ 466.750963][T13759] loop2: partition table beyond EOD, truncated [ 466.755514][T13759] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 467.017262][T13768] : renamed from lo [ 467.053586][T13769] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 467.079861][T13770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2265'. [ 467.309235][T13776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2267'. [ 467.336143][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 467.359253][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2269'. [ 467.401442][T13782] FAULT_INJECTION: forcing a failure. [ 467.401442][T13782] name failslab, interval 1, probability 0, space 0, times 0 [ 467.407033][T13782] CPU: 3 UID: 0 PID: 13782 Comm: syz.3.2270 Not tainted syzkaller #0 PREEMPT(full) [ 467.407060][T13782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 467.407071][T13782] Call Trace: [ 467.407078][T13782] [ 467.407086][T13782] dump_stack_lvl+0x16c/0x1f0 [ 467.407118][T13782] should_fail_ex+0x512/0x640 [ 467.407144][T13782] ? __kmalloc_noprof+0xbf/0x510 [ 467.407167][T13782] ? lsm_blob_alloc+0x68/0x90 [ 467.407183][T13782] should_failslab+0xc2/0x120 [ 467.407208][T13782] __kmalloc_noprof+0xd2/0x510 [ 467.407228][T13782] ? __pfx_perf_event_init_task+0x10/0x10 [ 467.407242][T13782] ? audit_alloc+0xa2/0x7b0 [ 467.407257][T13782] ? __pfx_audit_alloc+0x10/0x10 [ 467.407277][T13782] lsm_blob_alloc+0x68/0x90 [ 467.407295][T13782] security_task_alloc+0x2d/0x260 [ 467.407321][T13782] copy_process+0x2205/0x7690 [ 467.407354][T13782] ? __pfx_copy_process+0x10/0x10 [ 467.407382][T13782] ? _copy_from_user+0x59/0xd0 [ 467.407405][T13782] kernel_clone+0xfc/0x930 [ 467.407433][T13782] ? get_pid_task+0xfc/0x250 [ 467.407459][T13782] ? __pfx_kernel_clone+0x10/0x10 [ 467.407494][T13782] __do_sys_clone3+0x212/0x290 [ 467.407518][T13782] ? __pfx___do_sys_clone3+0x10/0x10 [ 467.407555][T13782] ? __fget_files+0x20e/0x3c0 [ 467.407573][T13782] ? handle_mm_fault+0x240/0xd10 [ 467.407603][T13782] ? rcu_is_watching+0x12/0xc0 [ 467.407626][T13782] __do_fast_syscall_32+0x7c/0x300 [ 467.407646][T13782] do_fast_syscall_32+0x32/0x80 [ 467.407663][T13782] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 467.407685][T13782] RIP: 0023:0xf707e579 [ 467.407701][T13782] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 467.407717][T13782] RSP: 002b:00000000f546e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 467.407847][T13782] RAX: ffffffffffffffda RBX: 00000000f546e460 RCX: 0000000000000058 [ 467.407859][T13782] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 467.407871][T13782] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 467.407882][T13782] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 467.407892][T13782] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 467.407918][T13782] [ 467.482521][T13791] netlink: 'syz.3.2274': attribute type 4 has an invalid length. [ 467.839184][T13796] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(9) [ 467.842474][T13796] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 467.853384][T13796] vhci_hcd vhci_hcd.0: Device attached [ 468.115559][T13803] netlink: 'syz.3.2276': attribute type 1 has an invalid length. [ 468.118195][T13803] netlink: 'syz.3.2276': attribute type 4 has an invalid length. [ 468.267378][ T8275] usb 40-1: SetAddress Request (14) to port 0 [ 468.279051][ T8275] usb 40-1: new SuperSpeed USB device number 14 using vhci_hcd [ 468.420404][T13798] vhci_hcd: connection reset by peer [ 468.428029][ T74] vhci_hcd: stop threads [ 468.431465][ T74] vhci_hcd: release socket [ 468.434221][ T74] vhci_hcd: disconnect device [ 468.802725][T13816] gtp0: entered promiscuous mode [ 468.811815][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2281'. [ 469.066954][T13826] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621 [ 469.108373][T13818] speed is unknown, defaulting to 1000 [ 469.194810][T13834] loop2: detected capacity change from 0 to 7 [ 469.201170][T13834] Dev loop2: unable to read RDB block 7 [ 469.205602][T13834] loop2: unable to read partition table [ 469.209170][T13834] loop2: partition table beyond EOD, truncated [ 469.212848][T13834] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 469.275252][T13835] loop9: detected capacity change from 0 to 7 [ 469.287765][T13835] ldm_validate_partition_table(): Disk read failed. [ 469.293487][T13835] Dev loop9: unable to read RDB block 0 [ 469.294644][T13837] rtc_cmos 00:05: Alarms can be up to one day in the future [ 469.298388][T13835] loop9: unable to read partition table [ 469.303736][T13835] loop9: partition table beyond EOD, truncated [ 469.307100][T13835] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 469.307100][T13835] ) failed (rc=-5) [ 469.335001][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 469.341038][T13839] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2289'. [ 470.786765][T13864] loop2: detected capacity change from 0 to 7 [ 470.791279][T13864] loop2: [POWERTEC] p1 p2 [ 470.794445][T13864] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 470.818225][T13864] loop2: p2 start 2490368 is beyond EOD, truncated [ 470.891050][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 471.620607][T13890] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 472.357681][T13899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2307'. [ 472.413950][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 472.423527][T13901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2308'. [ 472.691201][T11849] IPVS: starting estimator thread 0... [ 472.787576][T13911] IPVS: using max 32 ests per chain, 76800 per kthread [ 472.798028][T13913] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2313'. [ 473.372227][ T8275] usb 40-1: device descriptor read/8, error -110 [ 473.757557][ T8275] usb usb40-port1: attempt power cycle [ 474.157122][T13930] loop9: detected capacity change from 0 to 7 [ 474.208421][T13930] buffer_io_error: 28 callbacks suppressed [ 474.208469][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.253954][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.285921][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.317237][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.335967][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.346809][T11849] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 474.361201][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.387497][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.419668][T13930] ldm_validate_partition_table(): Disk read failed. [ 474.432435][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.460330][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.498657][T13930] Buffer I/O error on dev loop9, logical block 0, async page read [ 474.506294][T13930] Dev loop9: unable to read RDB block 0 [ 474.518365][ T8275] usb usb40-port1: unable to enumerate USB device [ 474.563734][T13930] loop9: unable to read partition table [ 474.566813][T13930] loop9: partition table beyond EOD, truncated [ 474.569782][T13930] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 474.569782][T13930] ) failed (rc=-5) [ 474.757237][T11849] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 474.762930][T11849] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023 [ 474.823383][T11849] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 474.910076][T11849] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 474.921532][T11849] usb 7-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 474.925982][T11849] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.936892][T11849] usb 7-1: Product: syz [ 474.940079][T11849] usb 7-1: Manufacturer: syz [ 474.947152][T11849] usb 7-1: SerialNumber: syz [ 474.975706][T11849] usb 7-1: config 0 descriptor?? [ 474.989317][T13925] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 474.994143][T11849] usb 7-1: ucan: probing device on interface #0 [ 475.003015][T11849] usb 7-1: ucan: invalid endpoint configuration [ 475.006333][T11849] usb 7-1: ucan: probe failed; try to update the device firmware [ 475.260568][T13947] gtp0: entered promiscuous mode [ 475.268040][T13947] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2323'. [ 475.298649][T13954] loop2: detected capacity change from 0 to 7 [ 475.304120][T12445] Dev loop2: unable to read RDB block 7 [ 475.308661][T12445] loop2: unable to read partition table [ 475.315784][T12445] loop2: partition table beyond EOD, truncated [ 475.374310][T13954] Dev loop2: unable to read RDB block 7 [ 475.376820][T13954] loop2: unable to read partition table [ 475.380074][T13954] loop2: partition table beyond EOD, truncated [ 475.389647][T13954] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 475.680328][T13965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2330'. [ 476.808786][T13980] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2334'. [ 476.968182][T13987] loop9: detected capacity change from 0 to 7 [ 476.974506][T13987] ldm_validate_partition_table(): Disk read failed. [ 476.978665][T13987] Dev loop9: unable to read RDB block 0 [ 476.982663][T13987] loop9: unable to read partition table [ 476.987200][T13987] loop9: partition table beyond EOD, truncated [ 476.990459][T13987] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 476.990459][T13987] ) failed (rc=-5) [ 477.726322][ T6034] usb 7-1: USB disconnect, device number 14 [ 477.908417][T13994] loop2: detected capacity change from 0 to 7 [ 477.929419][T13994] loop2: [POWERTEC] p1 p2 [ 477.938477][T13994] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 477.944510][T13994] loop2: p2 start 2490368 is beyond EOD, truncated [ 479.230620][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 479.387963][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 479.741748][T13996] kexec: Could not allocate control_code_buffer [ 479.837235][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 479.848776][T14026] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2351'. [ 479.855770][T14024] FAULT_INJECTION: forcing a failure. [ 479.855770][T14024] name failslab, interval 1, probability 0, space 0, times 0 [ 479.863879][T14024] CPU: 3 UID: 0 PID: 14024 Comm: syz.1.2346 Not tainted syzkaller #0 PREEMPT(full) [ 479.863907][T14024] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 479.863920][T14024] Call Trace: [ 479.863927][T14024] [ 479.863936][T14024] dump_stack_lvl+0x16c/0x1f0 [ 479.863973][T14024] should_fail_ex+0x512/0x640 [ 479.864002][T14024] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 479.864028][T14024] should_failslab+0xc2/0x120 [ 479.864054][T14024] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 479.864078][T14024] ? anon_vma_fork+0xe6/0x620 [ 479.864102][T14024] anon_vma_fork+0xe6/0x620 [ 479.864121][T14024] ? vm_area_dup+0x5a1/0x8d0 [ 479.864144][T14024] dup_mmap+0x152e/0x21d0 [ 479.864185][T14024] ? __pfx_dup_mmap+0x10/0x10 [ 479.864234][T14024] copy_process+0x4081/0x7690 [ 479.864283][T14024] ? __pfx_copy_process+0x10/0x10 [ 479.864315][T14024] ? _copy_from_user+0x59/0xd0 [ 479.864341][T14024] kernel_clone+0xfc/0x930 [ 479.864365][T14024] ? get_pid_task+0xfc/0x250 [ 479.864392][T14024] ? __pfx_kernel_clone+0x10/0x10 [ 479.864435][T14024] __do_sys_clone3+0x212/0x290 [ 479.864460][T14024] ? __pfx___do_sys_clone3+0x10/0x10 [ 479.864501][T14024] ? __fget_files+0x20e/0x3c0 [ 479.864520][T14024] ? handle_mm_fault+0x240/0xd10 [ 479.864555][T14024] ? rcu_is_watching+0x12/0xc0 [ 479.864579][T14024] __do_fast_syscall_32+0x7c/0x300 [ 479.864600][T14024] do_fast_syscall_32+0x32/0x80 [ 479.864617][T14024] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 479.864640][T14024] RIP: 0023:0xf709e579 [ 479.864656][T14024] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 479.864673][T14024] RSP: 002b:00000000f548e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 479.864692][T14024] RAX: ffffffffffffffda RBX: 00000000f548e460 RCX: 0000000000000058 [ 479.864704][T14024] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 479.864714][T14024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.864724][T14024] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 479.864735][T14024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 479.864760][T14024] [ 479.963687][ C3] vkms_vblank_simulate: vblank timer overrun [ 480.518763][T14045] lo speed is unknown, defaulting to 1000 [ 480.518807][T14045] lo speed is unknown, defaulting to 1000 [ 480.520009][T14045] lo speed is unknown, defaulting to 1000 [ 480.526260][T14045] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 480.537507][T14045] infiniband syz: RDMA CMA: cma_listen_on_dev, error -98 [ 480.924209][T14045] lo speed is unknown, defaulting to 1000 [ 480.926136][T14045] lo speed is unknown, defaulting to 1000 [ 480.927788][T14045] lo speed is unknown, defaulting to 1000 [ 480.929202][T14045] lo speed is unknown, defaulting to 1000 [ 480.964089][T14037] tty tty4: ldisc open failed (-12), clearing slot 3 [ 481.161256][T14054] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2357'. [ 481.336987][T14062] loop9: detected capacity change from 0 to 7 [ 481.341627][T14062] buffer_io_error: 23 callbacks suppressed [ 481.341641][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.348788][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.352881][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.355809][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.359027][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.361761][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.364713][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.367562][T14062] ldm_validate_partition_table(): Disk read failed. [ 481.370331][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.373545][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.377008][T14062] Buffer I/O error on dev loop9, logical block 0, async page read [ 481.379720][T14062] Dev loop9: unable to read RDB block 0 [ 481.382354][T14062] loop9: unable to read partition table [ 481.384845][T14062] loop9: partition table beyond EOD, truncated [ 481.446472][T14062] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 481.446472][T14062] ) failed (rc=-5) [ 482.289279][T14071] loop2: detected capacity change from 0 to 7 [ 482.297783][T12445] Dev loop2: unable to read RDB block 7 [ 482.300545][T12445] loop2: unable to read partition table [ 482.306477][T12445] loop2: partition table beyond EOD, truncated [ 482.317025][T14071] Dev loop2: unable to read RDB block 7 [ 482.320563][T14071] loop2: unable to read partition table [ 482.324200][T14071] loop2: partition table beyond EOD, truncated [ 482.327623][T14071] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 483.466654][T14097] loop9: detected capacity change from 0 to 7 [ 483.475279][T14097] ldm_validate_partition_table(): Disk read failed. [ 483.479474][T14097] Dev loop9: unable to read RDB block 0 [ 483.482605][T14097] loop9: unable to read partition table [ 483.485615][T14097] loop9: partition table beyond EOD, truncated [ 483.489122][T14097] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 483.489122][T14097] ) failed (rc=-5) [ 484.018949][T14104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2370'. [ 484.109833][T14107] FAULT_INJECTION: forcing a failure. [ 484.109833][T14107] name failslab, interval 1, probability 0, space 0, times 0 [ 484.116093][T14107] CPU: 0 UID: 0 PID: 14107 Comm: syz.1.2371 Not tainted syzkaller #0 PREEMPT(full) [ 484.116122][T14107] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 484.116135][T14107] Call Trace: [ 484.116142][T14107] [ 484.116151][T14107] dump_stack_lvl+0x16c/0x1f0 [ 484.116188][T14107] should_fail_ex+0x512/0x640 [ 484.116218][T14107] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 484.116247][T14107] should_failslab+0xc2/0x120 [ 484.116274][T14107] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 484.116298][T14107] ? anon_vma_fork+0x200/0x620 [ 484.116323][T14107] anon_vma_fork+0x200/0x620 [ 484.116348][T14107] dup_mmap+0x152e/0x21d0 [ 484.116391][T14107] ? __pfx_dup_mmap+0x10/0x10 [ 484.116442][T14107] copy_process+0x4081/0x7690 [ 484.116484][T14107] ? __pfx_copy_process+0x10/0x10 [ 484.116518][T14107] ? _copy_from_user+0x59/0xd0 [ 484.116575][T14107] kernel_clone+0xfc/0x930 [ 484.116601][T14107] ? get_pid_task+0xfc/0x250 [ 484.116631][T14107] ? __pfx_kernel_clone+0x10/0x10 [ 484.116678][T14107] __do_sys_clone3+0x212/0x290 [ 484.116704][T14107] ? __pfx___do_sys_clone3+0x10/0x10 [ 484.116750][T14107] ? __fget_files+0x20e/0x3c0 [ 484.116771][T14107] ? handle_mm_fault+0x240/0xd10 [ 484.116811][T14107] ? rcu_is_watching+0x12/0xc0 [ 484.116838][T14107] __do_fast_syscall_32+0x7c/0x300 [ 484.116861][T14107] do_fast_syscall_32+0x32/0x80 [ 484.116881][T14107] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 484.116906][T14107] RIP: 0023:0xf709e579 [ 484.116922][T14107] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 484.116942][T14107] RSP: 002b:00000000f548e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 484.116962][T14107] RAX: ffffffffffffffda RBX: 00000000f548e460 RCX: 0000000000000058 [ 484.116975][T14107] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 484.116986][T14107] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 484.116998][T14107] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 484.117010][T14107] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 484.117040][T14107] [ 486.404421][T14133] loop2: detected capacity change from 0 to 7 [ 486.409795][T12445] loop2: [POWERTEC] p1 p2 [ 486.411981][T12445] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 486.418012][T12445] loop2: p2 start 2490368 is beyond EOD, truncated [ 486.428944][T14133] loop2: [POWERTEC] p1 p2 [ 486.431962][T14133] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 486.437727][T14133] loop2: p2 start 2490368 is beyond EOD, truncated [ 486.497982][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 486.520998][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 487.333642][T14144] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 488.777937][T14170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2385'. [ 488.909607][T14175] loop9: detected capacity change from 0 to 7 [ 488.915947][T14175] buffer_io_error: 23 callbacks suppressed [ 488.915966][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.923050][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.928079][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.932413][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.938068][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.942995][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.947958][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.951460][T14175] ldm_validate_partition_table(): Disk read failed. [ 488.954582][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.963795][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.969716][T14175] Buffer I/O error on dev loop9, logical block 0, async page read [ 488.976326][T14175] Dev loop9: unable to read RDB block 0 [ 488.980781][T14175] loop9: unable to read partition table [ 488.983819][T14175] loop9: partition table beyond EOD, truncated [ 489.331687][T14175] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 489.331687][T14175] ) failed (rc=-5) [ 489.557055][T14191] netlink: 'syz.3.2395': attribute type 1 has an invalid length. [ 489.562418][T14191] netlink: 'syz.3.2395': attribute type 4 has an invalid length. [ 490.184362][T14203] tipc: Started in network mode [ 490.186946][T14203] tipc: Node identity c, cluster identity 4711 [ 490.189204][T14203] tipc: Node number set to 12 [ 491.890776][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 491.961255][T14233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2403'. [ 492.016355][T14228] gtp0: entered promiscuous mode [ 492.038791][T14228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2400'. [ 492.243993][T14238] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 493.103086][T14251] loop9: detected capacity change from 0 to 7 [ 493.108482][T14251] ldm_validate_partition_table(): Disk read failed. [ 493.111959][T14251] Dev loop9: unable to read RDB block 0 [ 493.115575][T14251] loop9: unable to read partition table [ 493.119798][T14251] loop9: partition table beyond EOD, truncated [ 493.122973][T14251] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 493.122973][T14251] ) failed (rc=-5) [ 494.277709][T14267] loop9: detected capacity change from 0 to 7 [ 494.282115][T14267] buffer_io_error: 23 callbacks suppressed [ 494.282152][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.287798][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.291161][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.295255][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.300300][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.304867][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.309460][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.313355][T14267] ldm_validate_partition_table(): Disk read failed. [ 494.317263][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.323201][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.327767][T14267] Buffer I/O error on dev loop9, logical block 0, async page read [ 494.331562][T14267] Dev loop9: unable to read RDB block 0 [ 494.335394][T14267] loop9: unable to read partition table [ 494.339259][T14267] loop9: partition table beyond EOD, truncated [ 494.341979][T14267] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 494.341979][T14267] ) failed (rc=-5) [ 494.520786][T14268] netlink: 'syz.3.2412': attribute type 16 has an invalid length. [ 494.524032][T14268] netlink: 'syz.3.2412': attribute type 17 has an invalid length. [ 494.603306][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2413'. [ 494.664149][T14268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 494.685296][ T842] lo speed is unknown, defaulting to 1000 [ 494.693342][ T842] syz: Port: 1 Link ACTIVE [ 494.738888][T14263] gtp0: entered promiscuous mode [ 495.215278][T14266] speed is unknown, defaulting to 1000 [ 495.244290][T14284] loop9: detected capacity change from 0 to 7 [ 495.255306][T14284] ldm_validate_partition_table(): Disk read failed. [ 495.259710][T14284] Dev loop9: unable to read RDB block 0 [ 495.263312][T14284] loop9: unable to read partition table [ 495.267601][T14284] loop9: partition table beyond EOD, truncated [ 495.271496][T14284] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 495.271496][T14284] ) failed (rc=-5) [ 495.295246][T14280] gtp0: entered promiscuous mode [ 495.344374][T14287] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2415'. [ 495.440579][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2417'. [ 495.534310][T14266] lo speed is unknown, defaulting to 1000 [ 496.413320][T14298] FAULT_INJECTION: forcing a failure. [ 496.413320][T14298] name failslab, interval 1, probability 0, space 0, times 0 [ 496.421182][T14298] CPU: 2 UID: 0 PID: 14298 Comm: syz.0.2421 Not tainted syzkaller #0 PREEMPT(full) [ 496.421213][T14298] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 496.421226][T14298] Call Trace: [ 496.421234][T14298] [ 496.421244][T14298] dump_stack_lvl+0x16c/0x1f0 [ 496.421280][T14298] should_fail_ex+0x512/0x640 [ 496.421311][T14298] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 496.421349][T14298] should_failslab+0xc2/0x120 [ 496.421377][T14298] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 496.421402][T14298] ? __raw_spin_lock_init+0x3a/0x110 [ 496.421431][T14298] ? copy_process+0x400f/0x7690 [ 496.421462][T14298] copy_process+0x400f/0x7690 [ 496.421501][T14298] ? __pfx_copy_process+0x10/0x10 [ 496.421535][T14298] ? _copy_from_user+0x59/0xd0 [ 496.421562][T14298] kernel_clone+0xfc/0x930 [ 496.421586][T14298] ? get_pid_task+0xfc/0x250 [ 496.421616][T14298] ? __pfx_kernel_clone+0x10/0x10 [ 496.421658][T14298] __do_sys_clone3+0x212/0x290 [ 496.421685][T14298] ? __pfx___do_sys_clone3+0x10/0x10 [ 496.421726][T14298] ? __fget_files+0x20e/0x3c0 [ 496.421746][T14298] ? handle_mm_fault+0x240/0xd10 [ 496.421784][T14298] ? rcu_is_watching+0x12/0xc0 [ 496.421810][T14298] __do_fast_syscall_32+0x7c/0x300 [ 496.421833][T14298] do_fast_syscall_32+0x32/0x80 [ 496.421853][T14298] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 496.421877][T14298] RIP: 0023:0xf7f83579 [ 496.421894][T14298] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 496.421913][T14298] RSP: 002b:00000000f547642c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 496.421934][T14298] RAX: ffffffffffffffda RBX: 00000000f5476460 RCX: 0000000000000058 [ 496.421946][T14298] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 496.421958][T14298] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 496.421969][T14298] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 496.421981][T14298] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 496.422009][T14298] [ 496.620477][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 496.635616][T14301] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2422'. [ 496.843153][T14312] loop9: detected capacity change from 0 to 7 [ 496.853806][T14312] ldm_validate_partition_table(): Disk read failed. [ 496.859452][T14312] Dev loop9: unable to read RDB block 0 [ 496.863630][T14312] loop9: unable to read partition table [ 496.867237][T14312] loop9: partition table beyond EOD, truncated [ 496.870602][T14312] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 496.870602][T14312] ) failed (rc=-5) [ 496.957004][ T34] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 497.132089][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 497.139364][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 497.144788][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 497.149350][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 497.156054][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 497.161484][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.202402][ T34] usb 8-1: config 0 descriptor?? [ 497.750867][ T34] plantronics 0003:047F:FFFF.0003: ignoring exceeding usage max [ 497.856744][ T34] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 498.566382][T14325] netlink: 'syz.2.2426': attribute type 4 has an invalid length. [ 498.698565][T14326] netlink: 'syz.2.2426': attribute type 4 has an invalid length. [ 499.251636][T14328] gtp0: entered promiscuous mode [ 499.267884][T14328] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2427'. [ 499.286947][T14331] loop9: detected capacity change from 0 to 7 [ 499.290103][T14331] buffer_io_error: 47 callbacks suppressed [ 499.290116][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.296497][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.304040][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.310810][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.315027][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.319349][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.323103][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.326876][T14331] ldm_validate_partition_table(): Disk read failed. [ 499.330162][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.335184][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.340179][T14331] Buffer I/O error on dev loop9, logical block 0, async page read [ 499.344280][T14331] Dev loop9: unable to read RDB block 0 [ 499.347605][T14331] loop9: unable to read partition table [ 499.350506][T14331] loop9: partition table beyond EOD, truncated [ 499.354023][T14331] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 499.354023][T14331] ) failed (rc=-5) [ 499.588086][T14335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2428'. [ 499.592066][T14335] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2428'. [ 499.867808][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2435'. [ 499.930982][T14350] netlink: 'syz.2.2435': attribute type 1 has an invalid length. [ 499.961238][ T9] usb 8-1: USB disconnect, device number 11 [ 500.125087][T14355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2437'. [ 500.758591][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2441'. [ 500.893128][T14368] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 500.991960][T14369] netlink: 'syz.1.2440': attribute type 4 has an invalid length. [ 501.034932][T14350] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 501.070062][T14360] gtp0: entered promiscuous mode [ 501.122574][T11849] speed is unknown, defaulting to 1000 [ 501.129989][T11849] syz0: Port: 1 Link ACTIVE [ 501.150970][T11849] speed is unknown, defaulting to 1000 [ 501.354142][T14381] loop9: detected capacity change from 0 to 7 [ 501.361237][T14381] ldm_validate_partition_table(): Disk read failed. [ 501.365741][T14381] Dev loop9: unable to read RDB block 0 [ 501.372300][T14381] loop9: unable to read partition table [ 501.375157][T14381] loop9: partition table beyond EOD, truncated [ 501.378506][T14381] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 501.378506][T14381] ) failed (rc=-5) [ 501.731617][T14388] loop2: detected capacity change from 0 to 7 [ 501.736500][T12445] Dev loop2: unable to read RDB block 7 [ 501.739298][T12445] loop2: unable to read partition table [ 501.744460][T12445] loop2: partition table beyond EOD, truncated [ 501.814881][T14389] netlink: 'syz.0.2445': attribute type 1 has an invalid length. [ 501.818100][T14389] netlink: 'syz.0.2445': attribute type 4 has an invalid length. [ 502.183944][T14388] Dev loop2: unable to read RDB block 7 [ 502.192888][T14388] loop2: unable to read partition table [ 502.200840][T14388] loop2: partition table beyond EOD, truncated [ 502.204714][T14388] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 502.344784][T14392] loop9: detected capacity change from 0 to 7 [ 502.352633][T14392] ldm_validate_partition_table(): Disk read failed. [ 502.356383][T14392] Dev loop9: unable to read RDB block 0 [ 502.359894][T14392] loop9: unable to read partition table [ 502.362527][T14392] loop9: partition table beyond EOD, truncated [ 502.365375][T14392] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 502.365375][T14392] ) failed (rc=-5) [ 502.720359][T14416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2454'. [ 503.097347][T14425] tmpfs: Cannot retroactively limit inodes [ 503.177951][T14430] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2459'. [ 504.037950][T14444] loop2: detected capacity change from 0 to 7 [ 504.041502][T14444] loop2: [POWERTEC] p1 p2 [ 504.043599][T14444] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 504.049654][T14444] loop2: p2 start 2490368 is beyond EOD, truncated [ 504.077505][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 504.330294][T14440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2461'. [ 504.450780][T14460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2470'. [ 506.429719][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.438248][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.252586][T14487] gtp0: entered promiscuous mode [ 507.264119][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2477'. [ 507.375960][T14506] loop9: detected capacity change from 0 to 7 [ 507.382288][T14506] buffer_io_error: 47 callbacks suppressed [ 507.382330][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.389887][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.393771][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.397944][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.405976][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.410372][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.415751][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.420823][T14506] ldm_validate_partition_table(): Disk read failed. [ 507.499628][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.503855][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.508037][T14506] Buffer I/O error on dev loop9, logical block 0, async page read [ 507.511821][T14506] Dev loop9: unable to read RDB block 0 [ 507.514986][T14506] loop9: unable to read partition table [ 507.520247][T14506] loop9: partition table beyond EOD, truncated [ 507.524365][T14506] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 507.524365][T14506] ) failed (rc=-5) [ 507.663292][T14509] geneve2: entered allmulticast mode [ 508.894183][T14527] loop9: detected capacity change from 0 to 7 [ 508.903026][T14527] ldm_validate_partition_table(): Disk read failed. [ 508.907754][T14527] Dev loop9: unable to read RDB block 0 [ 508.911056][T14527] loop9: unable to read partition table [ 508.915037][T14527] loop9: partition table beyond EOD, truncated [ 508.918799][T14527] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 508.918799][T14527] ) failed (rc=-5) [ 508.980408][T14525] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 509.071359][T14531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2488'. [ 509.239279][T14536] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2485'. [ 510.562262][T14549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2493'. [ 511.015704][T14557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2496'. [ 512.278430][T14568] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2498'. [ 512.344713][T14571] 9pnet_virtio: no channels available for device syz [ 512.841737][T14581] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 512.844392][T14581] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 512.847962][T14581] vhci_hcd vhci_hcd.0: Device attached [ 513.104100][T14585] loop2: detected capacity change from 0 to 7 [ 513.108096][T12445] Dev loop2: unable to read RDB block 7 [ 513.110558][T12445] loop2: unable to read partition table [ 513.113381][T12445] loop2: partition table beyond EOD, truncated [ 513.908157][T14585] Dev loop2: unable to read RDB block 7 [ 513.908211][T14585] loop2: unable to read partition table [ 513.908407][T14585] loop2: partition table beyond EOD, truncated [ 513.908438][T14585] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 513.978359][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 514.020578][T14587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2503'. [ 514.306822][ T2038] usb 40-1: SetAddress Request (18) to port 0 [ 514.309451][ T2038] usb 40-1: new SuperSpeed USB device number 18 using vhci_hcd [ 515.229760][T14582] vhci_hcd: connection reset by peer [ 515.238617][T14500] vhci_hcd: stop threads [ 515.241407][T14500] vhci_hcd: release socket [ 515.243366][T14500] vhci_hcd: disconnect device [ 515.249851][ T40] kauditd_printk_skb: 46 callbacks suppressed [ 515.249862][ T40] audit: type=1326 audit(1759082376.294:14592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.262806][ T40] audit: type=1326 audit(1759082376.294:14593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.274102][ T40] audit: type=1326 audit(1759082376.304:14594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.284613][ T40] audit: type=1326 audit(1759082376.304:14595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.300742][ T40] audit: type=1326 audit(1759082376.304:14596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.311534][ T5989] hid_parser_main: 8 callbacks suppressed [ 515.311561][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.313431][ T40] audit: type=1326 audit(1759082376.304:14597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=346 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.315014][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.318686][ T40] audit: type=1326 audit(1759082376.304:14598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=6 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.332960][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.335626][ T40] audit: type=1326 audit(1759082376.304:14599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.353880][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.357299][ T40] audit: type=1326 audit(1759082376.304:14600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.365424][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.367210][ T40] audit: type=1326 audit(1759082376.314:14601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14610 comm="syz.0.2510" exe="/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf7f83579 code=0x7ffc0000 [ 515.377181][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.387866][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.397381][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.403894][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.414558][ T5989] hid-generic 000F:0004:0000.0004: unknown main item tag 0x0 [ 515.438735][ T5989] hid-generic 000F:0004:0000.0004: hidraw1: HID v0.02 Device [syz0] on syz1 [ 516.596804][T11849] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 516.640495][T14620] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 516.757608][T11849] usb 8-1: Using ep0 maxpacket: 16 [ 516.762102][T11849] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 516.765866][T11849] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 516.774366][T11849] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 516.781061][T11849] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 516.784715][T11849] usb 8-1: SerialNumber: syz [ 516.792377][T11849] cdc_ether 8-1:1.0: probe with driver cdc_ether failed with error -22 [ 516.890426][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2514'. [ 517.054938][T14608] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:21 [ 517.057877][T14608] IPVS: set_ctl: invalid protocol: 46 255.255.255.255:20000 [ 517.924929][ T6180] usb 8-1: USB disconnect, device number 12 [ 517.977743][T14640] loop9: detected capacity change from 0 to 7 [ 517.982276][T14640] buffer_io_error: 28 callbacks suppressed [ 517.982361][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 517.989444][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 517.994078][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 517.998415][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.002367][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.006409][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.011438][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.016719][T14640] ldm_validate_partition_table(): Disk read failed. [ 518.019911][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.024099][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.069666][T14640] Buffer I/O error on dev loop9, logical block 0, async page read [ 518.078001][T14640] Dev loop9: unable to read RDB block 0 [ 518.084274][T14640] loop9: unable to read partition table [ 518.090379][T14640] loop9: partition table beyond EOD, truncated [ 518.138733][T14640] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 518.138733][T14640] ) failed (rc=-5) [ 518.162359][T14636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2515'. [ 519.171919][T14647] loop9: detected capacity change from 0 to 7 [ 519.192680][T14647] ldm_validate_partition_table(): Disk read failed. [ 519.198194][T14647] Dev loop9: unable to read RDB block 0 [ 519.289132][T14647] loop9: unable to read partition table [ 519.292328][T14647] loop9: partition table beyond EOD, truncated [ 519.295733][T14647] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 519.295733][T14647] ) failed (rc=-5) [ 519.392188][ T2038] usb 40-1: device descriptor read/8, error -110 [ 519.418533][ T6180] hid-generic 000F:0004:0000.0005: hidraw1: HID v0.02 Device [syz0] on syz1 [ 520.155865][ T74] tipc: Subscription rejected, illegal request [ 520.268388][ T2038] usb usb40-port1: attempt power cycle [ 520.363903][T14665] netlink: 'syz.3.2522': attribute type 1 has an invalid length. [ 520.367132][T14665] netlink: 'syz.3.2522': attribute type 4 has an invalid length. [ 521.283910][ T2038] usb usb40-port1: unable to enumerate USB device [ 521.532398][T14689] loop9: detected capacity change from 0 to 7 [ 521.538374][T14689] ldm_validate_partition_table(): Disk read failed. [ 521.542486][T14689] Dev loop9: unable to read RDB block 0 [ 521.546153][T14689] loop9: unable to read partition table [ 521.549310][T14689] loop9: partition table beyond EOD, truncated [ 521.552009][T14689] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 521.552009][T14689] ) failed (rc=-5) [ 521.661137][T14688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2528'. [ 521.990025][T14692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2530'. [ 522.476416][T14698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2531'. [ 522.501502][T14692] 9pnet_virtio: no channels available for device syz [ 522.523984][T14700] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2532'. [ 522.593129][T14702] loop2: detected capacity change from 0 to 7 [ 522.599776][T14702] loop2: [POWERTEC] p1 p2 [ 522.602161][T14702] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 522.609919][T14702] loop2: p2 start 2490368 is beyond EOD, truncated [ 522.663457][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 522.828350][T14708] loop9: detected capacity change from 0 to 7 [ 522.834936][T14708] ldm_validate_partition_table(): Disk read failed. [ 522.839072][T14708] Dev loop9: unable to read RDB block 0 [ 522.842074][T14708] loop9: unable to read partition table [ 522.845031][T14708] loop9: partition table beyond EOD, truncated [ 522.848315][T14708] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 522.848315][T14708] ) failed (rc=-5) [ 522.991414][T12445] buffer_io_error: 62 callbacks suppressed [ 522.993231][T12445] Buffer I/O error on dev loop9, logical block 0, async page read [ 523.012343][T12445] Buffer I/O error on dev loop9, logical block 0, async page read [ 523.059236][T12445] Buffer I/O error on dev loop9, logical block 0, async page read [ 523.102114][T12445] Buffer I/O error on dev loop9, logical block 0, async page read [ 524.190143][T14724] 9pnet_fd: Insufficient options for proto=fd [ 524.208747][T14727] loop2: detected capacity change from 0 to 7 [ 524.212701][T12445] Dev loop2: unable to read RDB block 7 [ 524.215467][T12445] loop2: unable to read partition table [ 524.219040][T12445] loop2: partition table beyond EOD, truncated [ 524.223598][T14727] Dev loop2: unable to read RDB block 7 [ 524.226065][T14727] loop2: unable to read partition table [ 524.228735][T14727] loop2: partition table beyond EOD, truncated [ 524.231616][T14727] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 524.288871][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 524.294732][T14729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2543'. [ 524.443726][T14733] trusted_key: encrypted_key: insufficient parameters specified [ 524.674595][T14737] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2545'. [ 525.108770][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 525.201865][T14743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2547'. [ 526.047603][T14756] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 527.328337][T14794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2555'. [ 527.420693][T14797] netlink: 'syz.1.2564': attribute type 12 has an invalid length. [ 527.424412][T14797] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2564'. [ 527.690357][T14800] rdma_rxe: rxe_newlink: failed to add syz_tun [ 528.446818][T14806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2558'. [ 529.516735][ T843] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 529.681041][ T843] usb 7-1: config 0 has no interfaces? [ 529.686111][ T843] usb 7-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 529.690836][ T843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.694687][ T843] usb 7-1: Product: syz [ 529.697324][ T843] usb 7-1: Manufacturer: syz [ 529.699350][ T843] usb 7-1: SerialNumber: syz [ 529.704322][ T843] usb 7-1: config 0 descriptor?? [ 529.892620][T14821] loop9: detected capacity change from 0 to 7 [ 529.899176][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.902402][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.906367][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.909528][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.913682][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.917431][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.920274][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.923126][T14821] ldm_validate_partition_table(): Disk read failed. [ 529.925635][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.930132][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.934154][T14821] Buffer I/O error on dev loop9, logical block 0, async page read [ 529.940229][T14821] Dev loop9: unable to read RDB block 0 [ 530.065818][T14821] loop9: unable to read partition table [ 530.068985][T14821] loop9: partition table beyond EOD, truncated [ 530.071339][T14821] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 530.071339][T14821] ) failed (rc=-5) [ 530.623781][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 530.623794][ T40] audit: type=1326 audit(1759082391.664:14647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.2.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 530.638564][ T40] audit: type=1326 audit(1759082391.684:14648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14807 comm="syz.2.2559" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f51579 code=0x7ffc0000 [ 531.041259][T14830] trusted_key: encrypted_key: insufficient parameters specified [ 531.842830][T14834] mac80211_hwsim hwsim22 4: renamed from wlan1 (while UP) [ 531.988678][ T1024] usb 7-1: USB disconnect, device number 15 [ 532.097493][T14839] loop2: detected capacity change from 0 to 7 [ 532.102458][T14839] Dev loop2: unable to read RDB block 7 [ 532.104755][T14839] loop2: unable to read partition table [ 532.107421][T14839] loop2: partition table beyond EOD, truncated [ 532.109869][T14839] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 532.346967][T14847] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2572'. [ 533.497854][T14857] loop2: detected capacity change from 0 to 7 [ 533.502415][T12445] Dev loop2: unable to read RDB block 7 [ 533.505022][T12445] loop2: unable to read partition table [ 533.509263][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2574'. [ 533.513288][T12445] loop2: partition table beyond EOD, truncated [ 533.520781][T14857] Dev loop2: unable to read RDB block 7 [ 533.523588][T14857] loop2: unable to read partition table [ 533.528946][T14857] loop2: partition table beyond EOD, truncated [ 533.531720][T14857] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 533.694443][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2575'. [ 534.713604][T14872] mac80211_hwsim hwsim9 4: renamed from wlan1 [ 534.836869][T14877] loop2: detected capacity change from 0 to 7 [ 534.841728][T14877] Dev loop2: unable to read RDB block 7 [ 534.844552][T14877] loop2: unable to read partition table [ 534.847412][T14877] loop2: partition table beyond EOD, truncated [ 534.854649][T14877] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 535.039390][T14884] netlink: 'syz.3.2580': attribute type 12 has an invalid length. [ 535.046638][T14884] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2580'. [ 535.199381][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2586'. [ 535.332036][T14890] loop9: detected capacity change from 0 to 7 [ 535.335762][T14890] buffer_io_error: 9 callbacks suppressed [ 535.335778][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.342334][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.346825][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.351042][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.354659][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.358748][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.363343][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.367579][T14890] ldm_validate_partition_table(): Disk read failed. [ 535.370566][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.374138][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.378381][T14890] Buffer I/O error on dev loop9, logical block 0, async page read [ 535.383019][T14890] Dev loop9: unable to read RDB block 0 [ 535.386265][T14890] loop9: unable to read partition table [ 535.389152][T14890] loop9: partition table beyond EOD, truncated [ 535.392108][T14890] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 535.392108][T14890] ) failed (rc=-5) [ 536.506081][T14905] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2588'. [ 536.512137][T14908] loop2: detected capacity change from 0 to 7 [ 536.517452][T14908] loop2: [POWERTEC] p1 p2 [ 536.519873][T14908] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 536.524703][T14908] loop2: p2 start 2490368 is beyond EOD, truncated [ 536.562950][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 536.600173][T14914] mac80211_hwsim hwsim20 4: renamed from wlan1 (while UP) [ 536.708228][T14915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2593'. [ 538.002725][T14937] loop9: detected capacity change from 0 to 7 [ 538.007081][T14937] ldm_validate_partition_table(): Disk read failed. [ 538.010949][T14937] Dev loop9: unable to read RDB block 0 [ 538.013859][T14937] loop9: unable to read partition table [ 538.016463][T14937] loop9: partition table beyond EOD, truncated [ 538.019308][T14937] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 538.019308][T14937] ) failed (rc=-5) [ 538.161430][T14929] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(11) [ 538.164512][T14929] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 538.168261][T14929] vhci_hcd vhci_hcd.0: Device attached [ 538.170311][T14939] netlink: 'syz.0.2597': attribute type 12 has an invalid length. [ 538.207170][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2597'. [ 538.402779][T14940] vhci_hcd: connection closed [ 538.403273][ T1143] vhci_hcd: stop threads [ 538.409022][ T1143] vhci_hcd: release socket [ 538.411495][ T1143] vhci_hcd: disconnect device [ 538.436971][ T34] usb 42-1: enqueue for inactive port 0 [ 538.468361][T14945] loop9: detected capacity change from 0 to 7 [ 538.474474][T14945] ldm_validate_partition_table(): Disk read failed. [ 538.478729][T14945] Dev loop9: unable to read RDB block 0 [ 538.481867][T14945] loop9: unable to read partition table [ 538.485108][T14945] loop9: partition table beyond EOD, truncated [ 538.488693][T14945] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 538.488693][T14945] ) failed (rc=-5) [ 538.943493][ T34] usb usb42-port1: attempt power cycle [ 539.025452][T14949] overlay: filesystem on ./file1 not supported as upperdir [ 539.153621][T14958] loop2: detected capacity change from 0 to 7 [ 539.164588][T14958] Dev loop2: unable to read RDB block 7 [ 539.168049][T14958] loop2: unable to read partition table [ 539.171230][T14958] loop2: partition table beyond EOD, truncated [ 539.174997][T14958] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 539.507315][ T34] usb usb42-port1: unable to enumerate USB device [ 540.056691][ T6034] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 540.341445][ T6034] usb 8-1: config 0 has no interfaces? [ 540.349098][ T6034] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 540.353479][ T6034] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.356074][ T6034] usb 8-1: Product: syz [ 540.380743][ T6034] usb 8-1: Manufacturer: syz [ 540.383703][ T6034] usb 8-1: SerialNumber: syz [ 540.393283][ T6034] usb 8-1: config 0 descriptor?? [ 540.408857][T14986] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2609'. [ 540.409087][T14984] loop9: detected capacity change from 0 to 7 [ 540.419220][T14984] buffer_io_error: 47 callbacks suppressed [ 540.419305][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.426288][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.430943][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.436360][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.441516][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.445328][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.449492][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.453855][T14984] ldm_validate_partition_table(): Disk read failed. [ 540.457909][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.593954][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.624721][T14984] Buffer I/O error on dev loop9, logical block 0, async page read [ 540.641906][T14984] Dev loop9: unable to read RDB block 0 [ 540.649659][T14984] loop9: unable to read partition table [ 540.660672][T14984] loop9: partition table beyond EOD, truncated [ 540.673327][T14984] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 540.673327][T14984] ) failed (rc=-5) [ 540.680429][T14986] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2609'. [ 540.688954][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.695979][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.826458][ T40] audit: type=1326 audit(1759082401.864:14649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.840173][ T40] audit: type=1326 audit(1759082401.884:14650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.850839][ T40] audit: type=1326 audit(1759082401.894:14651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.861418][ T40] audit: type=1326 audit(1759082401.894:14652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=180 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.870595][ T40] audit: type=1326 audit(1759082401.894:14653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.881685][ T40] audit: type=1326 audit(1759082401.894:14654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.889878][ T40] audit: type=1326 audit(1759082401.904:14655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 540.898924][ T40] audit: type=1326 audit(1759082401.904:14656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14963 comm="syz.3.2606" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf707e579 code=0x7ffc0000 [ 541.319292][T15000] netlink: 'syz.2.2610': attribute type 12 has an invalid length. [ 541.322776][T15000] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2610'. [ 541.384708][T14999] sp0: Synchronizing with TNC [ 542.316406][T14994] [U] [ 542.397871][ T1024] usb 8-1: USB disconnect, device number 13 [ 542.467595][ T5987] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.477262][ T5987] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.484985][ T5987] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.510655][ T5987] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.526748][ T5987] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.530871][T15012] FAULT_INJECTION: forcing a failure. [ 542.530871][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 542.542335][ T63] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 542.545617][ T63] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 542.547581][T15012] CPU: 3 UID: 0 PID: 15012 Comm: syz.0.2614 Not tainted syzkaller #0 PREEMPT(full) [ 542.547600][T15012] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 542.547608][T15012] Call Trace: [ 542.547615][T15012] [ 542.547623][T15012] dump_stack_lvl+0x16c/0x1f0 [ 542.547650][T15012] should_fail_ex+0x512/0x640 [ 542.547670][T15012] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 542.547687][T15012] should_failslab+0xc2/0x120 [ 542.547704][T15012] __kmalloc_cache_noprof+0x6a/0x3e0 [ 542.547716][T15012] ? ucma_process_join+0x237/0xa30 [ 542.547733][T15012] ucma_process_join+0x237/0xa30 [ 542.547745][T15012] ? __might_fault+0xe3/0x190 [ 542.547759][T15012] ? __might_fault+0xe3/0x190 [ 542.547770][T15012] ? __might_fault+0x13b/0x190 [ 542.547783][T15012] ? __pfx_ucma_process_join+0x10/0x10 [ 542.547797][T15012] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 542.547817][T15012] ucma_join_multicast+0xe8/0x160 [ 542.547831][T15012] ? __pfx_ucma_join_multicast+0x10/0x10 [ 542.547854][T15012] ? __pfx_ucma_join_multicast+0x10/0x10 [ 542.547866][T15012] ucma_write+0x1fb/0x330 [ 542.547877][T15012] ? __pfx_ucma_write+0x10/0x10 [ 542.547887][T15012] ? bpf_lsm_file_permission+0x9/0x10 [ 542.547921][T15012] ? security_file_permission+0x71/0x210 [ 542.547939][T15012] ? rw_verify_area+0xcf/0x6c0 [ 542.547954][T15012] ? __pfx_ucma_write+0x10/0x10 [ 542.547963][T15012] vfs_write+0x2a0/0x11d0 [ 542.547980][T15012] ? __pfx_vfs_write+0x10/0x10 [ 542.547992][T15012] ? find_held_lock+0x2b/0x80 [ 542.548005][T15012] ? __fget_files+0x204/0x3c0 [ 542.548021][T15012] ? __fget_files+0x20e/0x3c0 [ 542.548032][T15012] ? handle_mm_fault+0x240/0xd10 [ 542.548049][T15012] ksys_write+0x1f8/0x250 [ 542.548062][T15012] ? __pfx_ksys_write+0x10/0x10 [ 542.548084][T15012] ? rcu_is_watching+0x12/0xc0 [ 542.548100][T15012] __do_fast_syscall_32+0x7c/0x300 [ 542.548113][T15012] do_fast_syscall_32+0x32/0x80 [ 542.548124][T15012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 542.548140][T15012] RIP: 0023:0xf7f83579 [ 542.548151][T15012] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 542.548163][T15012] RSP: 002b:00000000f547655c EFLAGS: 00000296 ORIG_RAX: 0000000000000004 [ 542.548175][T15012] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000900 [ 542.548182][T15012] RDX: 00000000000000a0 RSI: 0000000000000000 RDI: 0000000000000000 [ 542.548189][T15012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 542.548198][T15012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 542.548207][T15012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 542.548229][T15012] [ 542.691202][T10877] syz_tun (unregistering): left allmulticast mode [ 542.691896][ T63] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 542.700937][ T63] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 542.707831][ T63] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 542.753347][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2617'. [ 542.911346][T15008] speed is unknown, defaulting to 1000 [ 543.128801][T15029] 9pnet_fd: Insufficient options for proto=fd [ 543.140453][T15008] lo speed is unknown, defaulting to 1000 [ 543.313452][T15008] chnl_net:caif_netlink_parms(): no params data found [ 543.464183][T15008] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.469141][T15008] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.472332][T15008] bridge_slave_0: entered allmulticast mode [ 543.476439][T15008] bridge_slave_0: entered promiscuous mode [ 543.485260][T15008] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.490618][T15008] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.493772][T15008] bridge_slave_1: entered allmulticast mode [ 543.500000][T15008] bridge_slave_1: entered promiscuous mode [ 543.575369][T15008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.582507][T15008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.648079][T15008] team0: Port device team_slave_0 added [ 543.654583][T15008] team0: Port device team_slave_1 added [ 543.741645][T15008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.744541][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.761554][T15008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.769859][T15008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.776916][T15008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.790496][T15008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.882404][T15008] hsr_slave_0: entered promiscuous mode [ 543.886123][T15008] hsr_slave_1: entered promiscuous mode [ 543.894291][T15008] debugfs: 'hsr0' already exists in 'hsr' [ 543.897608][T15008] Cannot create hsr debugfs directory [ 544.129244][T15008] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.215219][T15008] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.240554][T15053] gtp0: entered promiscuous mode [ 544.249783][T15053] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2628'. [ 544.309087][T15008] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.378687][T15008] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.427140][ T843] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 544.571442][T15059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.578239][T15059] bond0: (slave bond1): Enslaving as an active interface with an up link [ 544.602894][ T843] usb 6-1: config 0 has no interfaces? [ 544.621498][T15008] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 544.648908][T15008] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 544.666885][T15008] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 544.677152][ T843] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 544.677538][T15008] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 544.681107][ T843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 544.687729][ T843] usb 6-1: Product: syz [ 544.690187][ T843] usb 6-1: Manufacturer: syz [ 544.692237][ T843] usb 6-1: SerialNumber: syz [ 544.696089][ T843] usb 6-1: config 0 descriptor?? [ 544.801196][T15071] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2638'. [ 544.806837][ T63] Bluetooth: hci4: command tx timeout [ 544.833570][T15008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.853918][T15008] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.864765][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.867918][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.880065][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.883628][T14495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.140705][ T40] audit: type=1326 audit(1759082406.184:14657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.1.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 545.207100][ T40] audit: type=1326 audit(1759082406.184:14658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15040 comm="syz.1.2626" exe="/syz-executor" sig=0 arch=40000003 syscall=345 compat=1 ip=0xf709e579 code=0x7ffc0000 [ 545.414374][T15008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.587646][T15008] veth0_vlan: entered promiscuous mode [ 545.602760][T15008] veth1_vlan: entered promiscuous mode [ 545.649556][T15008] veth0_macvtap: entered promiscuous mode [ 545.661675][T15008] veth1_macvtap: entered promiscuous mode [ 545.682600][T15008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.694736][T15008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.710588][T14489] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.715795][T14489] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.722069][T14489] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.725562][T14489] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.856165][T14492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.860543][T14492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.893882][T14492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.897981][T14492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.053298][T15081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2611'. [ 546.403255][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2632'. [ 546.482733][T15093] 9pnet_fd: Insufficient options for proto=fd [ 546.886830][ T63] Bluetooth: hci4: command tx timeout [ 546.896332][ T842] usb 6-1: USB disconnect, device number 13 [ 547.440782][T15104] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 547.560286][T15105] speed is unknown, defaulting to 1000 [ 547.655022][T15105] lo speed is unknown, defaulting to 1000 [ 547.991746][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2640'. [ 547.996044][T15099] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 548.314244][T15120] FAULT_INJECTION: forcing a failure. [ 548.314244][T15120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.321257][T15120] CPU: 3 UID: 0 PID: 15120 Comm: syz.1.2645 Not tainted syzkaller #0 PREEMPT(full) [ 548.321276][T15120] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 548.321284][T15120] Call Trace: [ 548.321289][T15120] [ 548.321294][T15120] dump_stack_lvl+0x16c/0x1f0 [ 548.321318][T15120] should_fail_ex+0x512/0x640 [ 548.321340][T15120] _copy_from_user+0x2e/0xd0 [ 548.321354][T15120] kstrtouint_from_user+0xd6/0x1d0 [ 548.321371][T15120] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 548.321388][T15120] ? __lock_acquire+0xb97/0x1ce0 [ 548.321412][T15120] proc_fail_nth_write+0x83/0x220 [ 548.321427][T15120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 548.321444][T15120] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 548.321456][T15120] vfs_write+0x2a0/0x11d0 [ 548.321475][T15120] ? __pfx_vfs_write+0x10/0x10 [ 548.321488][T15120] ? find_held_lock+0x2b/0x80 [ 548.321504][T15120] ? __fget_files+0x20e/0x3c0 [ 548.321517][T15120] ? handle_mm_fault+0x240/0xd10 [ 548.321535][T15120] ksys_write+0x12a/0x250 [ 548.321549][T15120] ? __pfx_ksys_write+0x10/0x10 [ 548.321564][T15120] ? rcu_is_watching+0x12/0xc0 [ 548.321580][T15120] __do_fast_syscall_32+0x7c/0x300 [ 548.321599][T15120] do_fast_syscall_32+0x32/0x80 [ 548.321621][T15120] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 548.321643][T15120] RIP: 0023:0xf709e579 [ 548.321657][T15120] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 548.321674][T15120] RSP: 002b:00000000f548e590 EFLAGS: 00000293 ORIG_RAX: 0000000000000004 [ 548.321691][T15120] RAX: ffffffffffffffda RBX: 0000000000000007 RCX: 00000000f548e620 [ 548.321702][T15120] RDX: 0000000000000001 RSI: 00000000f7435ff4 RDI: 0000000000000000 [ 548.321709][T15120] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 548.321715][T15120] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 548.321722][T15120] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 548.321738][T15120] [ 548.969307][ T63] Bluetooth: hci4: command tx timeout [ 549.422520][T15135] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2650'. [ 550.878469][T15155] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2656'. [ 551.058338][ T63] Bluetooth: hci4: command tx timeout [ 551.413494][T15166] netlink: 'syz.3.2658': attribute type 83 has an invalid length. [ 552.265980][T15174] loop9: detected capacity change from 0 to 7 [ 552.270753][T15174] buffer_io_error: 9 callbacks suppressed [ 552.270841][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.277803][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.281455][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.285069][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.289665][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.293963][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.298363][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.302606][T15174] ldm_validate_partition_table(): Disk read failed. [ 552.307443][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.311890][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.316160][T15174] Buffer I/O error on dev loop9, logical block 0, async page read [ 552.427204][T15174] Dev loop9: unable to read RDB block 0 [ 552.429920][T15174] loop9: unable to read partition table [ 552.432983][T15174] loop9: partition table beyond EOD, truncated [ 552.436347][T15174] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 552.436347][T15174] ) failed (rc=-5) [ 554.360082][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2669'. [ 555.544788][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2672'. [ 555.770790][T15220] 9pnet_fd: p9_fd_create_tcp (15220): problem connecting socket to 127.0.0.1 [ 555.988265][T15225] loop9: detected capacity change from 0 to 7 [ 555.997631][T15225] ldm_validate_partition_table(): Disk read failed. [ 556.002400][T15225] Dev loop9: unable to read RDB block 0 [ 556.005632][T15225] loop9: unable to read partition table [ 556.009189][T15225] loop9: partition table beyond EOD, truncated [ 556.012073][T15225] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 556.012073][T15225] ) failed (rc=-5) [ 556.758235][T15231] loop2: detected capacity change from 0 to 7 [ 556.764060][T15231] loop2: [POWERTEC] p1 p2 [ 556.767803][T15231] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 556.772416][T15231] loop2: p2 start 2490368 is beyond EOD, truncated [ 556.932157][T15232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2679'. [ 557.031621][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 559.376035][T15271] loop2: detected capacity change from 0 to 7 [ 559.381213][T12445] loop2: [POWERTEC] p1 p2 [ 559.384264][T12445] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 559.400368][T12445] loop2: p2 start 2490368 is beyond EOD, truncated [ 559.410752][T15271] loop2: [POWERTEC] p1 p2 [ 559.413110][T15271] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 559.418445][T15271] loop2: p2 start 2490368 is beyond EOD, truncated [ 559.422712][T15272] autofs: Unknown parameter '/dev/bus/usb/00#/00#' [ 559.470591][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 559.491213][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 559.636530][T15282] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2695'. [ 559.721007][T15280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2693'. [ 560.411171][T15289] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2696'. [ 560.993551][T15298] loop9: detected capacity change from 0 to 7 [ 561.002716][T15298] buffer_io_error: 28 callbacks suppressed [ 561.002864][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.010544][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.015419][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.021343][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.025730][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.030282][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.035537][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.039437][T15298] ldm_validate_partition_table(): Disk read failed. [ 561.180682][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.185427][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.190632][T15298] Buffer I/O error on dev loop9, logical block 0, async page read [ 561.195304][T15298] Dev loop9: unable to read RDB block 0 [ 561.200620][T15298] loop9: unable to read partition table [ 561.203736][T15298] loop9: partition table beyond EOD, truncated [ 561.206972][T15298] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 561.206972][T15298] ) failed (rc=-5) [ 561.390896][T15307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2699'. [ 561.391826][T15295] gtp0: entered promiscuous mode [ 561.686496][T15317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2707'. [ 562.891992][T15343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2717'. [ 563.016618][T15344] netlink: zone id is out of range [ 563.024224][T15344] netlink: zone id is out of range [ 563.042053][T15344] netlink: zone id is out of range [ 563.062527][T15344] netlink: zone id is out of range [ 563.101540][T15344] netlink: zone id is out of range [ 563.112326][T15344] netlink: zone id is out of range [ 563.114979][T15344] netlink: zone id is out of range [ 563.120159][T15344] netlink: zone id is out of range [ 563.149203][T15344] netlink: zone id is out of range [ 563.242656][T15344] netlink: set zone limit has 4 unknown bytes [ 563.534400][T15352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2719'. [ 564.696387][T15364] loop2: detected capacity change from 0 to 7 [ 564.701452][T15364] Dev loop2: unable to read RDB block 7 [ 564.704510][T15364] loop2: unable to read partition table [ 564.707761][T15364] loop2: partition table beyond EOD, truncated [ 564.710431][T15364] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 565.020745][T15377] loop9: detected capacity change from 0 to 7 [ 565.023750][T15377] ldm_validate_partition_table(): Disk read failed. [ 565.026146][T15377] Dev loop9: unable to read RDB block 0 [ 565.032790][T15377] loop9: unable to read partition table [ 565.038075][T15377] loop9: partition table beyond EOD, truncated [ 565.041778][T15377] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 565.041778][T15377] ) failed (rc=-5) [ 565.836417][T15374] sp0: Synchronizing with TNC [ 566.079758][T15370] [U] [ 566.570438][ T6065] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 566.722799][ T6065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 566.736839][ T6065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 566.766193][ T6065] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 566.804686][ T6065] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 566.829175][ T6065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.840252][T15413] loop9: detected capacity change from 0 to 7 [ 566.847807][T15413] buffer_io_error: 28 callbacks suppressed [ 566.847918][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.855218][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.859569][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.865175][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.869682][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.873716][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.879155][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.882855][T15413] ldm_validate_partition_table(): Disk read failed. [ 566.886042][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.890853][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.897258][T15413] Buffer I/O error on dev loop9, logical block 0, async page read [ 566.901369][T15413] Dev loop9: unable to read RDB block 0 [ 566.905165][T15413] loop9: unable to read partition table [ 566.908733][T15413] loop9: partition table beyond EOD, truncated [ 566.912478][T15413] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 566.912478][T15413] ) failed (rc=-5) [ 567.114857][ T6065] usb 6-1: config 0 descriptor?? [ 567.432252][T15423] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2734'. [ 567.770432][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.773825][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.898929][ T6065] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 569.059768][T15444] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2740'. [ 569.101280][ T2038] usb 6-1: USB disconnect, device number 14 [ 569.212747][T15447] syz_tun: entered allmulticast mode [ 569.356797][T15453] loop9: detected capacity change from 0 to 7 [ 569.366027][T15453] ldm_validate_partition_table(): Disk read failed. [ 569.370899][T15453] Dev loop9: unable to read RDB block 0 [ 569.375780][T15453] loop9: unable to read partition table [ 569.379072][T15453] loop9: partition table beyond EOD, truncated [ 569.382069][T15453] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 569.382069][T15453] ) failed (rc=-5) [ 569.954649][T15456] Bluetooth: MGMT ver 1.23 [ 569.958699][T15456] Bluetooth: hci0: unsupported parameter 27905 [ 569.962037][T15456] Bluetooth: hci0: unsupported parameter 102 [ 569.964829][T15456] Bluetooth: hci0: unsupported parameter 27905 [ 569.972913][T15456] Bluetooth: hci0: unsupported parameter 102 [ 570.589891][T15471] loop2: detected capacity change from 0 to 7 [ 570.594726][T15471] Dev loop2: unable to read RDB block 7 [ 570.601834][T15471] loop2: unable to read partition table [ 570.604804][T15471] loop2: partition table beyond EOD, truncated [ 570.609435][T15471] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 571.427465][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2754'. [ 571.643005][T15486] loop9: detected capacity change from 0 to 7 [ 571.653161][T15486] ldm_validate_partition_table(): Disk read failed. [ 571.659866][T15486] Dev loop9: unable to read RDB block 0 [ 571.664743][T15486] loop9: unable to read partition table [ 571.668244][T15486] loop9: partition table beyond EOD, truncated [ 571.671121][T15486] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 571.671121][T15486] ) failed (rc=-5) [ 572.661020][T15508] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2762'. [ 573.461269][T15480] speed is unknown, defaulting to 1000 [ 574.172273][T15480] lo speed is unknown, defaulting to 1000 [ 574.237531][T15526] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 574.240372][T15526] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 574.243777][T15526] vhci_hcd vhci_hcd.0: Device attached [ 574.373111][T15528] vhci_hcd: connection closed [ 574.373732][T14498] vhci_hcd: stop threads [ 574.391387][T14498] vhci_hcd: release socket [ 574.393860][T14498] vhci_hcd: disconnect device [ 574.772928][T15542] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2773'. [ 575.897629][T15553] 9pnet_fd: Insufficient options for proto=fd [ 576.205192][T15562] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 576.209957][T15562] UDF-fs: Scanning with blocksize 2048 failed [ 576.220407][T15562] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 576.224812][T15562] UDF-fs: Scanning with blocksize 4096 failed [ 577.086898][T15558] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2774'. [ 577.420096][T15584] 9pnet_fd: Insufficient options for proto=fd [ 577.482141][T15586] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2788'. [ 577.517529][T15587] loop9: detected capacity change from 0 to 7 [ 577.523303][T15587] buffer_io_error: 47 callbacks suppressed [ 577.523343][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.528750][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.532172][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.536932][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.541830][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.545146][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.548421][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.552869][T15587] ldm_validate_partition_table(): Disk read failed. [ 577.554957][T15590] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2789'. [ 577.555976][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.638766][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.656387][T15587] Buffer I/O error on dev loop9, logical block 0, async page read [ 577.675163][T15587] Dev loop9: unable to read RDB block 0 [ 577.692833][T15587] loop9: unable to read partition table [ 577.711419][T15587] loop9: partition table beyond EOD, truncated [ 577.726069][T15587] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 577.726069][T15587] ) failed (rc=-5) [ 578.545620][T15598] tipc: Started in network mode [ 578.548713][T15598] tipc: Node identity 0a4a44ca2163, cluster identity 4711 [ 578.551746][T15598] tipc: Enabled bearer , priority 0 [ 578.555741][T15598] syzkaller0: entered promiscuous mode [ 578.558766][T15598] syzkaller0: entered allmulticast mode [ 578.949925][T15610] netlink: 'syz.1.2794': attribute type 1 has an invalid length. [ 578.954541][T15610] netlink: 'syz.1.2794': attribute type 4 has an invalid length. [ 579.357189][T15597] tipc: Resetting bearer [ 579.384052][T15597] tipc: Disabling bearer [ 579.448139][T15615] 9pnet_fd: Insufficient options for proto=fd [ 579.547385][T15619] rdma_rxe: rxe_newlink: failed to add syz_tun [ 579.882172][T15619] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 579.927547][T15641] loop2: detected capacity change from 0 to 7 [ 579.932926][T15641] Dev loop2: unable to read RDB block 7 [ 579.937996][T15641] loop2: unable to read partition table [ 579.940871][T15641] loop2: partition table beyond EOD, truncated [ 579.948613][T15641] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 580.027866][T15619] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.131526][T15619] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.195778][T15654] loop9: detected capacity change from 0 to 7 [ 580.217387][T15654] ldm_validate_partition_table(): Disk read failed. [ 580.223105][T15654] Dev loop9: unable to read RDB block 0 [ 580.226520][T15619] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 580.227642][T15654] loop9: unable to read partition table [ 580.233215][T15654] loop9: partition table beyond EOD, truncated [ 580.239324][T15654] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 580.239324][T15654] ) failed (rc=-5) [ 580.354274][T15653] gtp0: entered promiscuous mode [ 580.413646][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2811'. [ 580.483104][T14496] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.500883][T14496] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.517869][T14496] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.536282][T14496] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.992380][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2812'. [ 581.171497][T15664] netlink: 'syz.0.2814': attribute type 1 has an invalid length. [ 581.202189][T15664] 8021q: adding VLAN 0 to HW filter on device bond2 [ 581.258259][T15667] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2815'. [ 581.346323][T15660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2813'. [ 582.222458][T15664] bond2: (slave veth3): Enslaving as an active interface with a down link [ 582.238936][T15668] bond2: (slave wlan1): Enslaving as an active interface with a down link [ 582.684212][T15691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2820'. [ 583.354557][T15696] FAULT_INJECTION: forcing a failure. [ 583.354557][T15696] name failslab, interval 1, probability 0, space 0, times 0 [ 583.362310][T15696] CPU: 2 UID: 0 PID: 15696 Comm: syz.1.2823 Not tainted syzkaller #0 PREEMPT(full) [ 583.362334][T15696] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 583.362344][T15696] Call Trace: [ 583.362358][T15696] [ 583.362365][T15696] dump_stack_lvl+0x16c/0x1f0 [ 583.362395][T15696] should_fail_ex+0x512/0x640 [ 583.362419][T15696] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 583.362440][T15696] should_failslab+0xc2/0x120 [ 583.362462][T15696] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 583.362484][T15696] ? anon_vma_fork+0xe6/0x620 [ 583.362507][T15696] anon_vma_fork+0xe6/0x620 [ 583.362654][T15696] ? vm_area_dup+0x5a1/0x8d0 [ 583.362674][T15696] dup_mmap+0x152e/0x21d0 [ 583.362710][T15696] ? __pfx_dup_mmap+0x10/0x10 [ 583.362756][T15696] copy_process+0x4081/0x7690 [ 583.362791][T15696] ? __pfx_copy_process+0x10/0x10 [ 583.362820][T15696] ? _copy_from_user+0x59/0xd0 [ 583.362844][T15696] kernel_clone+0xfc/0x930 [ 583.362891][T15696] ? get_pid_task+0xfc/0x250 [ 583.362919][T15696] ? __pfx_kernel_clone+0x10/0x10 [ 583.362959][T15696] __do_sys_clone3+0x212/0x290 [ 583.362982][T15696] ? __pfx___do_sys_clone3+0x10/0x10 [ 583.363020][T15696] ? __fget_files+0x20e/0x3c0 [ 583.363039][T15696] ? handle_mm_fault+0x240/0xd10 [ 583.363070][T15696] ? rcu_is_watching+0x12/0xc0 [ 583.363094][T15696] __do_fast_syscall_32+0x7c/0x300 [ 583.363114][T15696] do_fast_syscall_32+0x32/0x80 [ 583.363131][T15696] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 583.363153][T15696] RIP: 0023:0xf709e579 [ 583.363168][T15696] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00 [ 583.363184][T15696] RSP: 002b:00000000f548e42c EFLAGS: 00000286 ORIG_RAX: 00000000000001b3 [ 583.363202][T15696] RAX: ffffffffffffffda RBX: 00000000f548e460 RCX: 0000000000000058 [ 583.363213][T15696] RDX: 0000000000000000 RSI: 0000000000080000 RDI: 0000000000000000 [ 583.363224][T15696] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 583.363234][T15696] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 583.363244][T15696] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 583.363271][T15696] [ 583.430634][T15699] loop2: detected capacity change from 0 to 7 [ 583.487339][T15008] Dev loop2: unable to read RDB block 7 [ 583.489955][T15008] loop2: unable to read partition table [ 583.492552][T15008] loop2: partition table beyond EOD, truncated [ 583.510235][T15699] Dev loop2: unable to read RDB block 7 [ 583.516169][T15699] loop2: unable to read partition table [ 583.521227][T15699] loop2: partition table beyond EOD, truncated [ 583.525594][T15699] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 583.813766][T15708] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2827'. [ 584.161589][T15721] loop2: detected capacity change from 0 to 7 [ 584.176263][T15721] loop2: [POWERTEC] p1 p2 [ 584.179761][T15721] loop2: p1 size 1680801792 extends beyond EOD, truncated [ 584.187335][T15721] loop2: p2 start 2490368 is beyond EOD, truncated [ 584.223871][T12445] udevd[12445]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 584.236378][T15717] gtp0: entered promiscuous mode [ 584.268684][T15717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2832'. [ 584.367660][T15727] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2835'. [ 585.270416][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 585.285602][T15733] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2837'. [ 585.351063][T15737] bond0: (slave veth0_to_team): Error: Device can not be enslaved while up [ 586.491416][T15756] tipc: Enabling of bearer rejected, failed to enable media [ 586.606510][T15760] loop9: detected capacity change from 0 to 7 [ 586.612310][T15760] buffer_io_error: 28 callbacks suppressed [ 586.612444][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.621204][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.625800][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.630087][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.638571][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.643097][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.647370][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.651627][T15760] ldm_validate_partition_table(): Disk read failed. [ 586.655480][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.659744][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.846870][T15760] Buffer I/O error on dev loop9, logical block 0, async page read [ 586.882002][T15760] Dev loop9: unable to read RDB block 0 [ 586.891116][T15760] loop9: unable to read partition table [ 586.904773][T15760] loop9: partition table beyond EOD, truncated [ 586.908316][T15760] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 586.908316][T15760] ) failed (rc=-5) [ 587.161046][T15767] netlink: 'syz.0.2847': attribute type 1 has an invalid length. [ 587.164919][T15767] netlink: 'syz.0.2847': attribute type 4 has an invalid length. [ 587.526383][T15756] speed is unknown, defaulting to 1000 [ 587.725123][T15756] lo speed is unknown, defaulting to 1000 [ 587.843775][T15770] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 587.846482][T15770] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 587.876376][T15770] vhci_hcd vhci_hcd.0: Device attached [ 587.932043][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 587.932065][ T40] audit: type=1800 audit(2000000011.539:14665): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2844" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 588.146765][ T6180] usb 42-1: SetAddress Request (12) to port 0 [ 588.168230][ T6180] usb 42-1: new SuperSpeed USB device number 12 using vhci_hcd [ 588.979337][T15779] vhci_hcd: connection reset by peer [ 588.982115][ T1143] vhci_hcd: stop threads [ 588.984106][ T1143] vhci_hcd: release socket [ 588.986982][ T1143] vhci_hcd: disconnect device [ 589.192670][T15842] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2879'. [ 589.198938][T15842] openvswitch: netlink: Flow key attr not present in new flow. [ 589.212345][T15842] : entered promiscuous mode [ 589.358682][T15854] siw: device registration error -23 [ 590.034763][T15881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2898'. [ 590.056871][T15881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2898'. [ 590.061034][T15881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2898'. [ 590.128820][T15892] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2901'. [ 590.132958][T15892] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2901'. [ 590.181002][T15899] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2907'. [ 590.185038][T15900] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2904'. [ 590.273539][T15912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 590.280313][T15904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2909'. [ 590.380736][T15924] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 591.082044][T15992] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 591.087607][T15992] netlink: 'syz.2.2950': attribute type 2 has an invalid length. [ 591.091678][T15992] netlink: 'syz.2.2950': attribute type 1 has an invalid length. [ 592.169428][T16071] netlink: 'syz.2.2988': attribute type 4 has an invalid length. Connection to localhost closed by remote host. [ 593.291929][ T6180] usb 42-1: device descriptor read/8, error -110 [ 593.694587][ T6180] usb usb42-port1: attempt power cycle [ 594.261278][ T6180] usb usb42-port1: unable to enumerate USB device [ 594.317675][T16069] tc_dump_action: action bad kind [ 594.359986][T16058] syz_tun (unregistering): left allmulticast mode [ 594.569913][T14498] smc: removing ib device syz1 [ 594.614831][ T34] syz1: Port: 1 Link DOWN [ 594.761517][ T1143] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.894525][ T1143] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.128912][ T1143] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.214935][T14498] ------------[ cut here ]------------ [ 595.217926][T14498] GID entry ref leak for dev syz1 index 2 ref=2 [ 595.221225][T14498] WARNING: CPU: 2 PID: 14498 at drivers/infiniband/core/cache.c:806 gid_table_release_one+0x387/0x4b0 [ 595.226796][T14498] Modules linked in: [ 595.229301][T14498] CPU: 2 UID: 0 PID: 14498 Comm: kworker/u32:20 Not tainted syzkaller #0 PREEMPT(full) [ 595.235966][T14498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 595.243560][T14498] Workqueue: ib-unreg-wq ib_unregister_work [ 595.246259][T14498] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 595.249020][T14498] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 b1 9c 24 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 c0 c2 ba 8c e8 8a 96 e3 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 8b 9c 24 f9 48 8d bd 78 07 00 00 48 [ 595.257193][T14498] RSP: 0018:ffffc90003887b50 EFLAGS: 00010286 [ 595.259814][T14498] RAX: 0000000000000000 RBX: ffff88805fafb200 RCX: ffffffff817a02f8 [ 595.262939][T14498] RDX: ffff888013b12440 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 595.266040][T14498] RBP: ffff88807965c000 R08: 0000000000000001 R09: 0000000000000000 [ 595.269580][T14498] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100bf5f65b [ 595.272881][T14498] R13: 0000000000000002 R14: 0000000000000002 R15: dffffc0000000000 [ 595.277086][T14498] FS: 0000000000000000(0000) GS:ffff8880976b9000(0000) knlGS:0000000000000000 [ 595.281512][T14498] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 595.284320][T14498] CR2: 000056293fe9102c CR3: 000000000e380000 CR4: 0000000000352ef0 [ 595.288003][T14498] DR0: 0000000000000004 DR1: 0000000000000002 DR2: 0000000000000081 [ 595.291481][T14498] DR3: 000000000000a400 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 595.294691][T14498] Call Trace: [ 595.296034][T14498] [ 595.298180][T14498] ib_device_release+0xef/0x1e0 [ 595.300986][T14498] ? __pfx_ib_device_release+0x10/0x10 [ 595.303310][T14498] device_release+0xa1/0x240 [ 595.305248][T14498] kobject_put+0x1e7/0x5a0 [ 595.307502][T14498] put_device+0x1f/0x30 [ 595.309249][T14498] process_one_work+0x9cc/0x1b70 [ 595.311355][T14498] ? __pfx_process_one_work+0x10/0x10 [ 595.313236][T14498] ? assign_work+0x1a0/0x250 [ 595.315314][T14498] worker_thread+0x6c8/0xf10 [ 595.318024][T14498] ? __pfx_worker_thread+0x10/0x10 [ 595.321070][T14498] kthread+0x3c2/0x780 [ 595.322785][T14498] ? __pfx_kthread+0x10/0x10 [ 595.324678][T14498] ? rcu_is_watching+0x12/0xc0 [ 595.326450][T14498] ? __pfx_kthread+0x10/0x10 [ 595.328676][T14498] ret_from_fork+0x56d/0x730 [ 595.330364][T14498] ? __pfx_kthread+0x10/0x10 [ 595.332523][T14498] ret_from_fork_asm+0x1a/0x30 [ 595.334668][T14498] [ 595.336217][T14498] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.339264][T14498] CPU: 2 UID: 0 PID: 14498 Comm: kworker/u32:20 Not tainted syzkaller #0 PREEMPT(full) [ 595.343442][T14498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 595.346640][T14498] Workqueue: ib-unreg-wq ib_unregister_work [ 595.348459][T14498] Call Trace: [ 595.349698][T14498] [ 595.350819][T14498] dump_stack_lvl+0x3d/0x1f0 [ 595.352541][T14498] vpanic+0x6e8/0x7a0 [ 595.354049][T14498] ? __pfx_vpanic+0x10/0x10 [ 595.355752][T14498] ? gid_table_release_one+0x387/0x4b0 [ 595.357763][T14498] panic+0xca/0xd0 [ 595.359081][T14498] ? __pfx_panic+0x10/0x10 [ 595.360613][T14498] ? check_panic_on_warn+0x1f/0xb0 [ 595.362665][T14498] check_panic_on_warn+0xab/0xb0 [ 595.364588][T14498] __warn+0xf6/0x3c0 [ 595.366188][T14498] ? preempt_schedule_notrace+0x62/0xe0 [ 595.368601][T14498] ? gid_table_release_one+0x387/0x4b0 [ 595.370728][T14498] report_bug+0x3c3/0x580 [ 595.372897][T14498] ? gid_table_release_one+0x387/0x4b0 [ 595.374995][T14498] handle_bug+0x184/0x210 [ 595.376618][T14498] exc_invalid_op+0x17/0x50 [ 595.378245][T14498] asm_exc_invalid_op+0x1a/0x20 [ 595.380024][T14498] RIP: 0010:gid_table_release_one+0x387/0x4b0 [ 595.382156][T14498] Code: 07 00 00 48 85 f6 74 2b 48 89 74 24 38 e8 b1 9c 24 f9 48 8b 74 24 38 44 89 f1 44 89 ea 48 c7 c7 c0 c2 ba 8c e8 8a 96 e3 f8 90 <0f> 0b 90 90 e9 6e fe ff ff e8 8b 9c 24 f9 48 8d bd 78 07 00 00 48 [ 595.390071][T14498] RSP: 0018:ffffc90003887b50 EFLAGS: 00010286 [ 595.392613][T14498] RAX: 0000000000000000 RBX: ffff88805fafb200 RCX: ffffffff817a02f8 [ 595.395602][T14498] RDX: ffff888013b12440 RSI: ffffffff817a0305 RDI: 0000000000000001 [ 595.398663][T14498] RBP: ffff88807965c000 R08: 0000000000000001 R09: 0000000000000000 [ 595.401985][T14498] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed100bf5f65b [ 595.404755][T14498] R13: 0000000000000002 R14: 0000000000000002 R15: dffffc0000000000 [ 595.407488][T14498] ? __warn_printk+0x198/0x350 [ 595.409312][T14498] ? __warn_printk+0x1a5/0x350 [ 595.411587][T14498] ib_device_release+0xef/0x1e0 [ 595.413567][T14498] ? __pfx_ib_device_release+0x10/0x10 [ 595.415897][T14498] device_release+0xa1/0x240 [ 595.417849][T14498] kobject_put+0x1e7/0x5a0 [ 595.419813][T14498] put_device+0x1f/0x30 [ 595.422060][T14498] process_one_work+0x9cc/0x1b70 [ 595.425033][T14498] ? __pfx_process_one_work+0x10/0x10 [ 595.427856][T14498] ? assign_work+0x1a0/0x250 [ 595.429389][T14498] worker_thread+0x6c8/0xf10 [ 595.431292][T14498] ? __pfx_worker_thread+0x10/0x10 [ 595.433488][T14498] kthread+0x3c2/0x780 [ 595.435196][T14498] ? __pfx_kthread+0x10/0x10 [ 595.437545][T14498] ? rcu_is_watching+0x12/0xc0 [ 595.439483][T14498] ? __pfx_kthread+0x10/0x10 [ 595.441352][T14498] ret_from_fork+0x56d/0x730 [ 595.443242][T14498] ? __pfx_kthread+0x10/0x10 [ 595.445143][T14498] ret_from_fork_asm+0x1a/0x30 [ 595.447336][T14498] [ 595.449649][T14498] Kernel Offset: disabled [ 595.452186][T14498] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:56:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000fb2813 RBX=0000000000000000 RCX=ffffffff8b91db29 RDX=0000000000000000 RSI=ffffffff8de4f872 RDI=ffffffff8c163780 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000001 R9 =ffffed1005646655 R10=ffff88802b2332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff8b91c66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880974b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4c12e4d3b0 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000002 DR2=0000000000000081 DR3=000000000000a400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080000010 Opmask01=0000000000021d1f Opmask02=00000000ffff1fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000007000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 77828e3d9e30d816 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000649 00007f4c12f3038d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c00000010 00007ffdb1938e70 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb1938e68 00007ffdb1938ea0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f4c12dc4025 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdb1938ea0 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6e6e6e6e6e6e6e 645f0f0a1d41180b ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a41531a01011c4e 5e3d171a1a530b02 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f72726520636269 6c67206c61746146 000000706d74752f 6e75722f7261762f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 640065676175676e 616c5f626400656c 7075745f62640062 6f6c625f62640065 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4800494b4d594b42 4d405f4e48004940 5c59585f4e48004e 43404e5f4e480049 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 68637461772e6575 6575716b726f7720 35353d6873657268 745f676f64686374 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e2bdf3228df3822 282b2e2fdf37342d 280b0412bfc92435 283232282c31242f ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 24bf242d282b232c 22ee222e312feebf 222e312feebf2435 283232282c31242f ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000016a40c9 RBX=0000000000000001 RCX=ffffffff8b91db29 RDX=0000000000000000 RSI=ffffffff8de4f872 RDI=ffffffff8c163780 RBP=ffffed1003bde488 RSP=ffffc9000046fdf8 R8 =0000000000000001 R9 =ffffed1005666655 R10=ffff88802b3332ab R11=0000000000000000 R12=0000000000000001 R13=ffff88801def2440 R14=ffffffff90abad90 R15=0000000000000000 RIP=ffffffff8b91c66f RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880975b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055faa963b660 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000002 DR2=0000000000000081 DR3=000000000000a400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000004004 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0becc24c41b436a4 d3bc40682f52568a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 af1100ef49ecd92e 1f7d47ae99c12ccb ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 b93ae6bb0a00db12 68729edfb2179529 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c927dcce6022bab4 1aa496f7f2b83860 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5fc3dbd7305212ca 091908813106b3ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 52d487ae787df068 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 632700054e6b6859 c61613c3ae186c82 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c9fd11400000000 5a914d3578c18238 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0e13e40d89e9fd86 083c57a187bea0a0 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ed66818b8f2ef2b3 b09ef6c272609d9b ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d746e6c632f73 746e65696c632d63 70722f6370726e75 732f6c656e72656b ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 540018534b4e494c 56454400184d4554 5359534255530018 4854415056454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f876a3f2240 00007f876a3f2240 0000000000005021 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8561ed25 RDI=ffffffff9b103780 RBP=ffffffff9b103740 RSP=ffffc900038874c0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b103740 R15=ffffffff8561ecc0 RIP=ffffffff8561ed4f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880976b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000056293fe9102c CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000002 DR2=0000000000000081 DR3=000000000000a400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefefe00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c2937ab5f911e74 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9677d81e1ad81b48 587aad08c8e4bada ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000003440 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0168df100168df7f 010000005c001688 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 40a400803ec40080 d04a56ce6982c4a7 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 010000004c800080 0168df6d01000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58ff807071abf008 4fbf62435f3a0080 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6fa4e6eda016b010 8f4fe7d1c2b22143 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f95db9488ad252c 9c2db55f496f0d82 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 752f332e6463685f 796d6d75642f6d72 6f6674616c702f73 6563697665642f73 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e2e65726f632e74 656e2e6c74637379 73203034313d6873 657268745f676f64 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e617020343d7372 6f6e696d5f796361 67656c5f6d756e5f 6964656d6f632e69 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656d6f63203233 3d78616d5f736462 6e2032333d706f6f 6c5f78616d203233 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d6d756e2e646368 5f796d6d75642030 34313d736365735f 74756f656d69745f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7265747369676572 6e755f7665647465 6e2e65726f632e74 656e2e6c74637379 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff8880517a9600 RCX=ffffffff820262ef RDX=ffff8880282f8000 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffea000145ea40 RSP=ffffc9000ccaf2b8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000001 R13=dffffc0000000000 R14=ffffc9000ccaf3d8 R15=ffff8880517a9600 RIP=ffffffff820262ef RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880977b9000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000057a4b4ac CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000002 DR2=0000000000000081 DR3=000000000000a400 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=0000000000000000 Opmask02=000000007ffeffff Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000a60ce07b 00000000cec3662e ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f60a9efa175c4d8 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 47ef1975841258be 1a4cfb555cfff97f ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1386e79a34f14b30 0c5055d9c65afe4b ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 339244e3c2394935 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e68321da2a332ea c58dbb3c1257e163 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 392622a300000000 c2ab30c18648a8f3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 653e10a5adb48441 4e9c1287aff3b740 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 dad090d69b083a52 307928903c99b09d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000056296386c310 0000562963861140 0000000000000041 000000007063742d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f876a3f1b20 0000562963860a90 0000000000001011 0000003177617264 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3a302e30312d3533 712d63707276703a 29393030322c3948 43492b3533512843 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 50647261646e6174 536e703a554d4551 6e76733a302e3072 623a343130322f31 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302f343064623a31 2b32316f70627e32 2d332e36312e312d 6e61696265642d33 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000